Lufi

What does Lufi mean?

Lufi means Let's Upload that FIle. It's a E2E encrypted file sharing software.

Which browsers are compatible?

Lufi is tested and working on the following browsers / devices : - Firefox - Chrome - Internet Explorer 11 - Microsoft Edge - Safari - iOS devices (ipad, iphone) - Android devices (Galaxy tab, Galaxy S8)

What does it do?

It stores files and allows you to download them.

Is that all? No. All the files are encrypted by the browser! It means that your files never leave your computer unencrypted. The administrator of the Lufi instance you use will not be able to see what is in your file, neither will your network administrator, or your ISP.

The encryption key part of the URL is a anchor (Cf. Fragment Identifier), that means this part is only processed client-side and does not reach the server. :-)

License

Lufi is licensed under the terms of the AGPL. See the LICENSE file.

Official instance

There is a demonstration site, available at https://lufi.fiat-tux.fr, with strong limitations on time and file size.

To really use Lufi, you can go to https://framadrop.org, provided by the Framasoft association (you can help them to keep providing free services at https://soutenir.framasoft.org).

Logo

Because Lufi is quite similar to Luffy, like in "Monkey D. Luffy" from One Piece manga, the logo is a straw hat, made with pain, love and Inkscape.

Wiki (work in progress)

The official wiki will contain all you need to know about Lufi (installation, configuration, etc.). Go to https://framagit.org/fiat-tux/hat-softwares/lufi/wikis/home or clone it:

git clone https://framagit.org/fiat-tux/hat-softwares/lufi.wiki.git

Encryption

All the encryption/decryption processes take place in your browser. The encryption key is never sent over the network.

However please note that some metadata are sent unencrypted:

• the file name
• its size
• its mimetype

Client

There is the web interface, but you can use a CLI client too! Have a look at lufi-cli or install it directly with sudo npm install -g lufi-cli.

There is another client in Python too: https://framagit.org/setop/pylufic.

Internationalization

Lufi comes with several languages.

Please, see this wiki page to know how to contribute to internationalization.

API endpoints

When using accounts, some endpoints require authentication, others don't. Here are the endpoints that needs to be excluded from authentication if you’re using an authenticating proxy:

• "^/r/" (page to get a file)
• "^/js/" (get js assets)
• "^/img/" (get images assets)
• "^/css/" (get css assets)
• "^/lang/" (change language)
• "^/font/" (get fonts assets)
• "^/partial/" (get rendered js assets)
• "^/download/" (websocket URL to download a file)
• "^/upload" (websocket URL to upload a file)
• "^/guest/" (guest page for uploading)
• "^/about" (about page)
• "^/delays$" (delays information page)
• "^/fullstats$" (JSON endpoint giving stats about the files)

Authors

See AUTHORS.md file.

Contribute!

Please consider contributing, either by reporting issues or by helping the internationalization. And of course, code contributions are welcome!

The details on how to contribute are on the wiki.

This software uses Fiat Tux Code of conduct.

Other dependencies

Lufi is written in Perl with the Mojolicious framework.

It uses:

• Materialize framework to look not too ugly
• jQuery
• Stanford Javascript Crypto Library
• Moment.js for displaying real dates instead of unix timestamps.
• Filesize.js for displaying file sizes

Deploy Lufi

An ansible role and a terraform plan reside under the .provision directory. An user could utilize the terraform plan if they chose to deploy lufi on AWS, if that's not the goal, they could simply execute the ansible role in part. Usage docs for both are present in their respective directories.

You can use Docker by using the recipe on https://github.com/megalis-bretagne/lufi-docker.