Drag-drop upload, unguessable URLs (72 bits entropy), auto-deletes after 1h/24h, strict MIME allowlist + CSP sandbox.
One docker compose up. MIT.
🔗 https://github.com/rogerhokp/tmpdrop
🌐 https://tmpdrop.solardev.online
Why another one: public file hosts retain your data on infra you don't control + predictable URLs get scraped. tmpdrop is "0x0.st but on your own box" with a security posture I'm actually comfortable with.
Built with Claude Code pair-programming; threat model + security choices mine.
Top comments (0)