Dead Drop Service
Send One-Time Secrets in a secure way
A Dead Drop service written in Kotlin / KTor.
This service uses sjcl on client-side to encrypt the data, stores the encrypted data on the server (while never sharing the password with the server), and generates a link to get the data (once) again.
This is the source-code of drop.moetz.dev.
Setup using Docker
The docker image can be found here: hub.docker.com/r/flowmo7/dead-drop.
Possible environment variables:
DOMAIN: the domain this application is available at, e.g.drop.example.orgIS_HTTPS: Whether this application is available as HTTPS / behind an HTTPS reverse proxy (which it should be), e.g.trueDATA_DIRECTORY: The directory to store the data in (within the docker image), e.g./var/dead-drop/dataENCRYPTION_KEY_PATH: The file-path to store the server-side encryption key at (within the docker image), e.g./var/dead-drop/key/key.secretFILE_KEEP_TIME_IN_HOURS: The number of hours to keep a drop-record. Defaults to24.SHOW_GITHUB_LINK_IN_FOOTER: Whether the GitHub link should be visible in the footer. Defaults totrue.
Example docker-compose.yml
services:
dead-drop:
image: "flowmo7/dead-drop:master"
restart: unless-stopped
ports:
- 8080:8080 #Should be behind an SSL reverse proxy
environment:
- DOMAIN=drop.example.org
- IS_HTTPS=true
- DATA_DIRECTORY=/var/dead-drop/data
- ENCRYPTION_KEY_PATH=/var/dead-drop/key/key.secret
volumes:
- /srv/docker/dead-drop/data:/var/dead-drop/data:rw
- /srv/docker/dead-drop/key:/var/dead-drop/key:rw
Acknowledgments
This project is heavily inspired by BillKeenan/dead-drop-python, which I heavily used (self-hosted) before creating this service.
LICENSE
Copyright 2021 Florian Mötz
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
8 Aug 26, 2022
26 Jan 3, 2023
32 Oct 8, 2022
174 Dec 22, 2022
4 Feb 10, 2022
2 Dec 22, 2022
54 Dec 30, 2022
79 Dec 9, 2022
2 Apr 9, 2022
0 Feb 16, 2022
0 Dec 21, 2021
6 Dec 19, 2022
31 Dec 21, 2022
1.3k Jan 4, 2023
22 Oct 26, 2022
2 Aug 31, 2022
1 Dec 3, 2021
4 Apr 18, 2022
5 Sep 3, 2022
3 Feb 3, 2022
16 May 9, 2022
0 Dec 14, 2021
6.3k Dec 23, 2022
7 Dec 24, 2022
173 Jan 2, 2023
6 Nov 8, 2022
0 Nov 3, 2021
30 Nov 16, 2022