Chibisafe is a self-hosted file vault: drop a file into the browser or through its API and you get back a direct, shareable link. It is written in TypeScript and aimed at people who want their own upload endpoint — for screenshots, documents, media libraries or anything else they would rather not hand to a third-party host. Files are stored on your own disk or in your own S3 bucket, and the whole instance is managed from a built-in dashboard instead of environment files.

Uploading and sharing

• Drag-and-drop uploads from the browser, with chunked uploads for very large files to survive network interruptions.
• A masonry gallery for browsing images and media, with file management and tagging across the vault.
• Albums and folders that get their own shareable links, plus snippets and gists for text.
• A built-in URL shortener for the links you hand out, and direct links for every file.
• Public mode, user-accounts mode or invite-only mode, so an instance can be a private vault or a small shared service.
• ShareX integration out of the box, an iOS shortcut for the share menu, and a browser extension for grabbing content from web pages.

Administration

• A dashboard covering nearly every instance setting: site name, rate limits, maximum file size, accepted extensions and metadata descriptions.
• User management with quotas, so accounts can be given limited storage.
• API keys per user, which makes the service easy to script against or connect to other tools.
• S3-compatible object storage is supported as an alternative to local disk.
• Uploaded files are served with a restrictive Content-Security-Policy sandbox so that untrusted documents cannot run scripts in the application’s origin.

Deployment

• Docker is the recommended install; the compose template exposes a single port (24424) for a reverse proxy such as Caddy, nginx or Apache.
• The first start creates an admin account with the same password, which should be changed immediately after the first login.
• Upgrading from v5 keeps your data: copy the uploads/ and database/ folders into the new instance and migrations run on start. Instances older than v5 have to be set up fresh.
• No ads and no tracking beyond IP logging of requests; MIT licensed, with release 6.7.0 published in October 2026.

Licence

Open source — MIT Licence. Free to self-host, modify and run commercially.

Alternatives

• Nextcloud — full collaboration platform with file sync and sharing
• Seafile — file sync and share server with library-based versioning
• ownCloud — self-hosted file sync and sharing suite
• Immich — self-hosted photo and video library with mobile backup
• Transfer.sh — quick command-line file sharing from a terminal