Stars
Forks
Watchers
Developer links
Paaster
Paaster is the pastebin for snippets too sensitive for a public paste site: every paste is encrypted in your browser before upload, so the server only ever stores ciphertext it cannot read. Paste code or logs and the text is sealed with libsodium the moment you stop typing, with the secret riding in the link fragment that browsers never send to a server. Share the link and only its holder can open the paste; share it as a QR code, or beam it to your other device with a five-minute code using Send to device. Set a paste to delete after its first view or after a chosen time, protect it with an access code, and let automatic language detection syntax-highlight the result. Your own pastes stay browsable in a local history, themes and keyboard shortcuts keep the editor fast, and drag-and-drop file sharing works the same encrypted way. Upload from the terminal with the companion CLI or the REST API, and store everything in MongoDB with MinIO, S3, or Cloudflare R2 holding the encrypted blobs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Benefits
- Encryption That Cannot Be Disabled
- Every paste is sealed in the browser with libsodium secretstream before upload, and the key stays in the URL fragment, so the server stores ciphertext it can never read.
- Pastes That Delete Themselves
- Set any paste to vanish after its first view or after a fixed time, and add an access code so a leaked link alone is not enough to open it.
- History Without an Account
- Client secrets live in your browser's IndexedDB, giving you a private paste history and later deletion controls without sign-ups, emails, or server-side user profiles to breach.
- Any S3 Bucket Behind It
- Encrypted blobs land in MinIO, AWS S3, Cloudflare R2, or any S3-compatible store, while MongoDB keeps the metadata, so storage scales independently of the app server.
Features
- Libsodium Browser Encryption
- The Svelte client uses crypto_secretstream_xchacha20poly1305, crypto_pwhash, and crypto_secretbox_easy from libsodium, with no dynamically loaded third-party code at runtime.
- Send to Device Transfer
- A five-minute code plus captcha moves the paste you are viewing to another device, sealed with crypto_box_seal so the server never sees content or keys.
- CLI and REST API
- The companion paaster-cli and a documented REST API upload pastes from terminals and scripts, returning the same fragment-keyed links as the web editor.
- QR Code Sharing
- Every paste can be shared as a QR code, and automatic or manual language detection applies the right syntax highlighting to the shared view.
- Docker Compose Deployment
- The official compose file runs the app on port 3000 beside MongoDB and optional MinIO, configured entirely through environment variables like COOKIE_SECRET.