mirror of
https://github.com/okxlin/appstore.git
synced 2026-09-23 00:00:59 +00:00
okxlin
56bad2194d
Source: okxlin/appstore#4782 Contributor: @YuniqueUnic Includes the upstream v1.5.2 log-redaction fix, lifecycle scripts, strict-store normalization, and documented base-image CVE assessment.
Elizabeth
Introduction
Elizabeth is a self-hosted real-time file and message sharing tool that requires no account registration. Users share Markdown messages, files, images, and links through rooms, while one Rust container serves the API, WebSocket endpoint, and embedded web interface.
Features
- Real-time rooms: Synchronizes messages and room state over WebSocket and supports shareable room links.
- File and message sharing: Supports Markdown, code highlighting, images, PDFs, text files, and link previews.
- Security and permissions: Provides JWT sessions, room passwords, granular permissions, expiry policies, and entry limits.
- Lightweight deployment: Runs as a single container with SQLite by default and can connect to an external PostgreSQL database.
Access
- The web port is configured in the install form and defaults to
4092. - Open the web UI after install to create rooms and share links without registration.
- Health endpoint:
/api/v1/health.
Persistence
APP_DATA_DIRmounts to/app/datafor SQLite and other local state.APP_STORAGE_DIRmounts to/app/storagefor room file uploads.- Back up both directories before upgrades or migrations.
- Keep
JWT_SECRETstable across upgrades to avoid invalidating sessions.
Security
- The install form randomizes
JWT_SECRET; use a strong secret for public deployments. - The container runs with
read_only,cap_drop: ALL,no-new-privileges, and a/tmptmpfs. - The image base may contain system-package CVEs for which the distribution has
not yet published fixes. The reported Critical findings are in
perl-base; the Rust service does not invoke Perl or extract archives, and one finding applies only to 32-bit builds. Keep the image updated and limit unnecessary external exposure. - For public access, terminate TLS with a reverse proxy and configure room passwords or permissions as needed.