dumpd-it

A tiny, secure, curl-friendly file drop — bashupload, self-hosted.

BETA Infrastructure & Ops · 8 features · Go · Docker · Let's Encrypt (autocert)

overview

dumpd-it is the simplest possible way to move a file: curl -T backup.tar.gz https://files.example.com and you get a download URL back. Uploads are restricted to allowlisted IPs; downloads are open to anyone with the link.

It's a single Go binary (or Docker image) with built-in TLS — point DOMAIN at it and it fetches and auto-renews a Let's Encrypt certificate itself. Files are gzip'd at rest and expire on a rolling 7-day TTL.

features

  • ▸Upload from allowlisted IPs only — downloads open to anyone with the link
  • ▸Built-in TLS — automatic Let's Encrypt, self-signed mode, or bring your own cert
  • ▸Compression at rest — gzip on write, transparent decompression for clients
  • ▸Rolling 7-day TTL — every download resets the clock; sweeper reclaims orphans
  • ▸10 GB default cap — bypassable per-request with an unlock key; min-free-disk floor
  • ▸Domain-agnostic URLs — Host/X-Forwarded-Proto aware, or pin BASE_URL
  • ▸Download metadata — Accept: application/json returns size, sha256, expiry, hits
  • ▸Weak ETag + If-None-Match → 304, nosniff, CSP sandbox, HSTS on TLS

screenshots

Landing page — upload instructions and limits
Landing page — upload instructions and limits

stack

Go Docker Let's Encrypt (autocert)

get started

quickstart
$ curl https://files.example.com/backup.tar.gz -T backup.tar.gz
$ curl -O https://files.example.com/d/<id>/backup.tar.gz
$ docker compose up -d --build
▊