forked from vladzodchey/chancery
Selfhosted, security-focused paste store. (Public instance security modifications)
https://bin.capyboyars.ru/
- Python 79.1%
- Nix 14.5%
- HTML 3.5%
- CSS 2%
- Dockerfile 0.9%
| .forgejo/workflows | ||
| .zed | ||
| docs | ||
| src/chancery | ||
| tests | ||
| .dockerignore | ||
| .envrc | ||
| .gitignore | ||
| Dockerfile | ||
| flake.lock | ||
| flake.nix | ||
| LICENSE | ||
| pyproject.toml | ||
| README.md | ||
| uv.lock | ||
Chancery
Selfhosted, security-focused paste store.
The project sacrifices some UX in favor of simplicity and security.
Example: there is no admin web panel and no frontend JS. Everything is server-rendered.
Built on FastAPI, Typer, Jinja2 and sqlcipher3. Built with uv, ruff and ty.
Security features:
- Mandatory DB encryption
- Password-protected pastes (Content encrypted with XSalsa20-Poly1305 under a key derived via Argon2id)
- One-time-read pastes (like 1ty.me)
- TTL (pastes can be set to be deleted automatically after N seconds)
- Configurably long cryptographically secure random IDs for pastes
Quickstart
Docker
NixOS
See NixOS options
Proxy
See Running behind a reverse proxy
Development | Building from source
With nix:
git clone https://codeberg.org/vladzodchey/chancery.git chancery && cd chancery
nix develop
chancery
Without nix:
git clone https://codeberg.org/vladzodchey/chancery.git chancery && cd chancery
uv venv && uv sync
chancery
AI
I used LLMs to help scout dependency documentation and usage examples. Chancery's code is hand-written and held up to the security standards I'm aware of. Non-slop PRs welcome.
Versions 0.2.0 and down
As about three or so people can know, this is not the first attempt at making Chancery. Not even the second. But the previous attempts were so unsuccessful I decided to do a full rewrite with a new repo.