Hosting securely temporary logs between anonymous persons and me. reddit / selfhosted ---------------------------------------------------------------------- Tolriq · 2023-12-15 07:51 Been looking for something that can achieve the need but never found anything. So time to ask. ​ As indie dev I always need to get users logs from my apps for support and I'm doing most of the support publicly on a discourse server. Users uploading the files to discourse can trigger some small privacy issues and makes it hard to manage for deletion after no more needed. So I'm looking for a solution where anonymous people could easily upload files that no one but me and them could access. (With some basic security like file size limits and number of uploads by a given IP per X time) Ideally it would generate an ID that they give to me and a password so they can still access the file it they want to delete themselves, but can give me the ID publicly as password would be required to access. (And me getting access without the password to avoid the issue of them giving it to me). Bonus would be automated deletion of the files after a configurable delay. Anything that requires users to create an account does not really work. If they no more have access to the file after upload and closing the page this can be OK. ---------------------------------------------------------------------- m4v1s · 2023-12-15 09:10 it might be easier to host an anonymous file upload service and have the user just send you think link after they upload. There are a few on awesome-selfhosted that could work. ---------------------------------------------------------------------- Tolriq · 2023-12-15 09:16 Yes but the problem is spam and management. Allowing direct PM/chat to new users is dangerous for the others users at could allow spammers. And I don't think I can allow only that toward me on Discourse. Another solution would be anonymous upload solution where I can easily list all the uploads as admin and they can add a tag so I can find the upload based on their forum name or thread id or something but I'm not sure I ever find one that allows that. ---------------------------------------------------------------------- TearDrainer · 2023-12-15 09:26 I would suggest some sort of pastebin. Stumpled upon this, should fit your bill: https://github.com/orhun/rustypaste ---------------------------------------------------------------------- Tolriq · 2023-12-15 09:36 The problem with all patsebin variations is privacy. How the user can give me a link publicly without other users being able to access the files. Or how do they add some identifier to the upload so I can find the correct ones myself without the need for a link. I can have many logs uploaded at the same time. ---------------------------------------------------------------------- TearDrainer · 2023-12-15 09:53 Should be no problem? Since it is only you who needs access to the files you can disable file listing and probably block GET requests to the server. So everybody can upload and paste you the link, nobody can DL. You can access the files directly on the server. You only need to tell the users to put some kind of identification in the file itself. Or you just associate user-file by the link the send you... ---------------------------------------------------------------------- Tivin-i · 2023-12-15 10:10 You could ask the users to encrypt it using your public key, that way only you can decrypt it. ---------------------------------------------------------------------- Tolriq · 2023-12-15 10:32 If the system does it else users are not able to do that, it's already hard to get them to upload the logs. ---------------------------------------------------------------------- Tolriq · 2023-12-15 10:35 Hum yes I guess adding a proxy in front with auth for the actual file access would work thanks for the suggestion. rustypaste is not user friendly enough but I can probably find one that works well. ---------------------------------------------------------------------- Common_Scale5448 · 2023-12-15 11:30 Liquidfiles ---------------------------------------------------------------------- TearDrainer · 2023-12-15 12:21 Another thought - why go through all the hassle with involving the user? Can't you integrate a logging service to your apps to collect errors/logs centralized? E.g. something like glitchtip https://glitchtip.com/ ---------------------------------------------------------------------- Tolriq · 2023-12-15 12:26 Because of privacy concerns and amount of data. This is not about crash data, this is about large and complex logs to understand things like server synchronisation issue or file tags parsing. Multiple MB of logs each times. Not something you want all users to have automatically uploaded to a central server that would be insane. ---------------------------------------------------------------------- Tolriq · 2023-12-15 12:27 Thanks but too complex and costly for the need. Currently checking [https://eikek.github.io/sharry/](https://eikek.github.io/sharry/) seems it can do what I need by disabling user registration and aliases where files are uploaded and only shared with me. ---------------------------------------------------------------------- [deleted] · 2023-12-15 14:27 [removed] ---------------------------------------------------------------------- Normal-Bench-6787 · 2023-12-15 22:52 Check out transfer.sh. It's open source and MIT licensed.