Direct-Xfer
📲 Install mobile app

Network

Local IP…
Public IP…
Link base…
External accessNot tested
Used to build share links. Leave empty for auto-detection.

Active transfers 0

Active shares 0

History (last 2000 transfers)

● live
Activity

Activité 0

Historique persistant des événements pertinents de Direct-Xfer.

Dashboards

Dashboard

Insights & automatic alerts
Automatic alerts0
Compared with previous period
Statistics by user
Real-time & last 24 hours
Active transfers
Stalled transfers 0
Last 24 hours
Recent failures
Activity Downloads Uploads
Daily trends
Downloads / day
Deposits / day
Transferred volume over time
Success rate over time
Downloads vs uploads
Completed vs interrupted
Top links (by volume)
Top countries
Top 5 clients (downloads)
Top 5 clients (uploads)
Speed & performance
Usage by weekday / hour
File-size distribution
Top downloaded files
Links & shares
Protected vs open
Encrypted vs plaintext
Expiring soon (7 days)
Security
2FA adoption
Admin sign-in security
Storage & notifications
Reception disk space
Temporary and partial files
Storage by file type
Largest received files
File-type storage & traffic
Direct-Xfer storage report
Direct-Xfer diagnostics
Diagnostics have not been run yet.
Reverse proxy status
Webhook status
System Health

Santé Système

Supervision complète de l’instance Direct-Xfer.

—/100
Chargement…
Alertes et état global
Alertes actives0
Ressources système et processus
CPU système
Mémoire système
Disque principal
Processus Direct-Xfer
Boucle événementielle
Uptime & charge
Historique des ressources
Stockage et volumes
Volumes Direct-Xfer
Sauvegardes
Recherche / OCR
Charge applicative
Partages
Transferts
Connecteurs & jobs
Réseau, TLS et exposition
Réseau / reverse proxy
TLS / certificat
Notifications
Sécurité et intégrité
Sécurité
Audit signé
Runtime
Diagnostic détaillé
Dernier diagnostic completNon exécuté
Cliquez sur « Diagnostic complet » pour exécuter les contrôles approfondis.
Images

Direct image links: each photo gets Full, Mini, and Micro URLs that open the image itself, with no page around it — ready to embed or hotlink.

Image domain & external access

Used for image links only. Leave empty to reuse the main link domain.

External access Not tested

Comma-separated sites allowed to embed your images. Leave empty to allow any site. Direct visits and this server's own pages are always allowed; subdomains of a listed host match too.

Shared images 0

History 0

The last 50 revoked images are kept here.

Notifications

Notifications

Consultez, filtrez et gérez toutes les notifications de ce compte.

Chargement…
Configuration

Configuration

Security

Locks the admin interface (requires signing in again) after this long with no mouse or keyboard activity.

Direct-Xfer creates a private local certification authority once, then signs the LAN server certificate with it. Install the root certificate once on each trusted LAN device to remove browser warnings.

Leave empty to keep the default (local network). Loopback is always allowed. A wrong entry can lock you out.

Blocks a public upload/delete client temporarily after mass deletion or a ransomware-like upload burst. It never deletes files automatically.

Data Loss Prevention (DLP)

Local scan before publishing a share. Detected secrets are redacted in logs and the interface.

Centre de notifications

Choisissez les catégories de notifications à recevoir dans le centre de notifications pour ce compte.

Alertes personnalisées

Créez une alerte lorsqu’un de vos liens atteint un seuil précis.

Notifications (webhook)
Browser notifications (Web Push)

Receive push notifications in this browser for the events ticked above — even when the admin page is closed. Each browser/device subscribes separately.

Both alerts use the webhook above. Save your changes before testing.

E-mail notifications (SMTP)
Defaults for new links

The "New share" file picker opens here. Leave empty to reuse the last-browsed folder.

Reception-link defaults
Global limits

Hard ceiling applied to every download, on top of any per-link limit.

Server-local time. The window may span midnight (e.g. 08:00 → 02:00). Outside it, only the caps above apply.

Public download protection

A self-hosted proof-of-work solved in the visitor's browser (no third party). Deters mass scraping of a leaked link; higher difficulty = more work per download.

Sends one notification (over the webhook / e-mail above) when a single link is downloaded from at least this many countries in the window — a sign the link may have leaked. Needs IP geolocation enabled.

Privacy

Off = no external lookups; visitor countries won't be shown.

⚠ Destructive: permanently deletes reception & collaboration files older than this — lost files cannot be recovered. Off by default.

Keeps old links out of the main list without changing or deleting their managed files.

⚠ Destructive: removes Direct-Xfer-managed copies for expired links (received files, images, encrypted blobs). Host source files are never deleted.

Interface

Tints the mobile browser UI bar on public pages (meta theme-color).

Comma-separated durations offered in the link modals — e.g. 6h, 3d, 2w, 1mo. “Never” is always available.

Quick actions on share cards

Choose the icon shortcuts shown directly on every share card. All actions remain available in the details panel.

Shown in the top bar of public pages. PNG/JPG/GIF/WebP, up to ~200 KB.

Shown as a banner on every public download / reception page.

Overlays the visitor IP (or recipient name for nominative links) over previews — deters re-sharing of screenshots.

Maintenance

Compares the running version against the latest published image tag. No data is sent beyond the version query.

Contacts documented public-IP services only when enabled. Disable this to prevent startup public-IP requests.

Emergency stop

Immediately pause every active link (reversible). Files are left untouched.

Backup & restore

Exports every link's settings (paths, quotas, expiries, passwords) — not the files. Useful to migrate links to another server.

The admin action log (logins, link create/revoke, settings changes, alerts).

Scheduled full backup

A full backup bundles the store, transfer journal and secret notes. When DATA_KEY is set, the encrypted backup also preserves the Local CA and its private key. Without DATA_KEY, the CA private key is never exported. Pushed to a folder, WebDAV or S3.

Mount a writable host folder into the container (e.g. /backups) so backups survive a container recreation.

Save your settings before using Backup now / Test. Restore replaces everything and cannot be undone.

Storage connectors

Import and export files through an rclone remote: SFTP, SMB, WebDAV, Google Drive, OneDrive, Dropbox or Box. Credentials stay in /data/rclone/rclone.conf.

For import, the local field is an optional path below /Direct-Xfer/Imports. For export, enter an existing host, reception or image path.