Project description. Lorem ipsum dolor sit amet.
With the command-line clients, all crypto operations are performed locally. The password is never sent to the server.
- libsodium
- Python
- Everything listed in requirements.txt
Create a new S3 bucket, and new credentials with restricted access.
Add an inline policy for the new user:
{
"Statement": [
{
"Action": "s3:*",
"Effect": "Allow",
"Resource": [
"arn:aws:s3:::bucket-name",
"arn:aws:s3:::bucket-name/*"
]
}
]
}Replace bucket-name with the name of your bucket.
Install Heroku Toolbelt and configure the account
TODO: Explain why a custom buildpack is needed
First, create the app with a custom buildpack
$ heroku create my_app --buildpack https://github.com/ddollar/heroku-buildpack-multi.gitThis will also add a new git remote in the local repository
Set environment variables
$ heroku config:set AWS_ACCESS_KEY_ID=xxxxxxx AWS_SECRET_ACCESS_KEY=xxxxxxx
$ heroku config:set AWS_REGION=eu-central-1
$ heroku config:set S3_BUCKET=xxxxxxx
$ heroku config:set APP_SECRET=super_secret_random_stringPush the code to Heroku
$ git push heroku masterMake sure that at least one dyno is running
$ heroku ps:scale web=1Create and activate virtualenv
$ virtualenv venv
$ source venv/bin/activateInstall the required dependencies
$ pip install -r requirements.txtTODO: Set environment variables (same as for Heroku, but use export KEY=value)
Host the Flask app locally
$ python app.py
* Running on http://127.0.0.1:5000/ (Press CTRL+C to quit)or, for local Heroku testing,
$ heroku local
forego | starting web.1 on port 5000
web.1 | [2016-01-25 17:04:42 +0000] [5059] [INFO] Starting gunicorn 19.4.5
web.1 | [2016-01-25 17:04:42 +0000] [5059] [INFO] Listening at: http://0.0.0.0:5000 (5059)
web.1 | [2016-01-25 17:04:42 +0000] [5059] [INFO] Using worker: sync
web.1 | [2016-01-25 17:04:42 +0000] [5064] [INFO] Booting worker with pid: 5064The web interface should now be up and running on (on port 5000 by default).
Upload a file:
$ python cli.py upload filename.ext
Password:
File uploaded.
Download URL: https://server/download/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxxThe download URL can be opened in a web browser, or the ID can be used directly with the command line client:
$ python cli.py download xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
Password:
Download the file 'filename.ext'? [Y/n] y
File saved as 'filename.ext'Works pretty much the same as the Python client (at least the parts that actually work).