{"id":15150344,"url":"https://github.com/wardpearce/paaster","last_synced_at":"2026-07-05T00:01:50.531Z","repository":{"id":38389872,"uuid":"465929984","full_name":"WardPearce/paaster","owner":"WardPearce","description":"Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.","archived":false,"fork":false,"pushed_at":"2024-10-28T11:55:52.000Z","size":5114,"stargazers_count":452,"open_issues_count":6,"forks_count":17,"subscribers_count":5,"default_branch":"main","last_synced_at":"2024-10-29T17:38:30.692Z","etag":null,"topics":["b2","docker","drive","e2ee","end-to-end-encryption","paaster","paste","pastebin","privacy","python","rclone","s3","self-hosted","store"],"latest_commit_sha":null,"homepage":"https://paaster.io","language":"Svelte","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/WardPearce.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null},"funding":{"github":"WardPearce"}},"created_at":"2022-03-04T00:33:26.000Z","updated_at":"2024-10-28T11:55:55.000Z","dependencies_parsed_at":"2022-09-14T10:01:06.651Z","dependency_job_id":"ca938e9e-1913-4624-84a7-553ab2cadd9f","html_url":"https://github.com/WardPearce/paaster","commit_stats":{"total_commits":827,"total_committers":7,"mean_commits":"118.14285714285714","dds":"0.45344619105199513","last_synced_commit":"70da1d03f530485715f4f77bf13abd56b52a693e"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/WardPearce%2Fpaaster","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/WardPearce%2Fpaaster/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/WardPearce%2Fpaaster/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/WardPearce%2Fpaaster/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/WardPearce","download_url":"https://codeload.github.com/WardPearce/paaster/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247819940,"owners_count":21001394,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["b2","docker","drive","e2ee","end-to-end-encryption","paaster","paste","pastebin","privacy","python","rclone","s3","self-hosted","store"],"created_at":"2024-09-26T14:02:15.598Z","updated_at":"2026-07-05T00:01:50.522Z","avatar_url":"https://github.com/WardPearce.png","language":"Svelte","funding_links":["https://github.com/sponsors/WardPearce"],"categories":[],"sub_categories":[],"readme":"\u003cdiv align=\"center\"\u003e\n  \u003cimg src=\"./assets/logo.png\" width=\"300px\" /\u003e\n  \u003ch1\u003ePaaster.io\u003c/h1\u003e\n  \u003cblockquote\u003e\n    Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.\n  \u003c/blockquote\u003e\n\n  \u003ca href=\"https://paaster.io/terms-of-service\"\u003eTerms of service\u003c/a\u003e · \u003ca href=\"https://paaster.io/privacy-policy\"\u003ePrivacy policy\u003c/a\u003e\n\n  \u003cbr\u003e\u003cbr\u003e\n\n  \u003ca href=\"https://fink.inlang.com/github.com/WardPearce/paaster\"\u003e\u003cimg src=\"https://img.shields.io/badge/Help_translate-0a0a0a?style=for-the-badge\" alt=\"Translate\"\u003e\u003c/a\u003e\n  \u003ca href=\"https://github.com/WardPearce/paaster/releases\"\u003e\u003cimg src=\"https://img.shields.io/github/v/release/WardPearce/paaster?style=for-the-badge\u0026label=Release\u0026color=0a0a0a\" alt=\"Release\"\u003e\u003c/a\u003e\n  \u003ca href=\"https://matrix.to/#/#ward:matrix.org\"\u003e\u003cimg src=\"https://img.shields.io/badge/Chat-0a0a0a?style=for-the-badge\u0026logo=matrix\" alt=\"Matrix\"\u003e\u003c/a\u003e\n  \u003ca href=\"https://hub.docker.com/r/wardpearce/paaster\"\u003e\u003cimg src=\"https://img.shields.io/docker/pulls/wardpearce/paaster?style=for-the-badge\u0026label=Docker\u0026color=0a0a0a\" alt=\"Docker\"\u003e\u003c/a\u003e\n\u003c/div\u003e\n\n---\n\n# Preview\n\n![Preview of paaster](./previews/image.png)\n\n---\n\n# Table of Contents\n\n- [Features](#features)\n- [Deployment](#deployment)\n  - [Docker Compose](#docker-compose)\n  - [Reverse Proxy](#reverse-proxy)\n  - [Minio Setup](#minio)\n- [Security](#security)\n  - [What is E2EE?](#what-is-e2ee)\n  - [FAQ](#faq)\n- [Cipher](#cipher)\n- [Requesting Features](#requesting-features)\n- [Support](#support)\n\n---\n\n# Features\n\n- [End-to-end encryption](#what-is-e2ee)\n- Memory efficient\n- File drag \u0026 drop\n- Keyboard shortcuts\n- Paste history\n- Themes\n- Delete after view or X amount of time\n- Share via QR code\n- [CLI Tool](https://github.com/WardPearce/paaster-cli)\n- i18n support ([Contribute](https://fink.inlang.com/github.com/WardPearce/paaster))\n- Automatic or manual language detection\n- No dynamically loaded 3rd party dependencies — malicious code must be present at build time\n- Use of `package-lock.json` \u0026 [Socket.dev](https://socket.dev/) to fight supply chain attacks\n\n---\n\n# Deployment\n\nPaaster requires S3-compatible object storage. You can use a hosted solution or self-host using [MinIO](https://github.com/minio/minio).\n\n## Docker Compose\n\n```yaml\nservices:\n  paaster:\n    container_name: paaster\n    image: wardpearce/paaster:latest\n    restart: unless-stopped\n    ports:\n      - 3015:3000\n    environment:\n      COOKIE_SECRET: \"\" # A secure random value\n\n      S3_ENDPOINT: \"\"\n      S3_REGION: \"\"\n      S3_ACCESS_KEY_ID: \"\"\n      S3_SECRET_ACCESS_KEY: \"\"\n      S3_BUCKET: \"\"\n      s3_FORCE_PATH_STYLE: true # Required for minio\n\n      MONGO_DB: \"paasterv3\"\n      MONGO_URL: \"mongodb://paaster_mongodb:27017\"\n\n  paaster_mongodb:\n    image: mongo\n    container_name: paaster_mongodb\n    restart: unless-stopped\n    environment:\n      MONGODB_DATA_DIR: /data/db\n      MONDODB_LOG_DIR: /dev/null\n\n  paaster_minio:\n    container_name: paaster_minio\n    image: quay.io/minio/minio\n    restart: unless-stopped\n    ports:\n      - \"9000:9000\"\n      - \"9001:9001\"\n    environment:\n      MINIO_ROOT_USER: \"\"\n      MINIO_ROOT_PASSWORD: \"\" # A secure random value\n    volumes:\n      - ~/minio/data:/data\n    command: server /data --console-address \":9001\"\n```\n\n## Reverse Proxy\n\n### Caddy\n\n```caddy\npaaster.io {\n    reverse_proxy localhost:3016\n}\n\n# Only required for MinIO\ns3.paaster.io {\n    header Access-Control-Allow-Origin \"https://paaster.io\" {\n        defer\n    }\n    header Access-Control-Allow-Methods \"GET,POST,OPTIONS,HEAD,PATCH,PUT,DELETE\"\n    header Access-Control-Allow-Headers \"User-Agent,Authorization,Content-Type\"\n    reverse_proxy localhost:9000\n}\n```\n\n### NGINX\n\n```nginx\nserver {\n    listen 80;\n    server_name paaster.io;\n\n    location / {\n        proxy_pass http://localhost:3016;\n        proxy_set_header Host $host;\n        proxy_set_header X-Real-IP $remote_addr;\n    }\n}\n\n# Only required for MinIO\nserver {\n    listen 80;\n    server_name s3.paaster.io;\n\n    location / {\n        add_header 'Access-Control-Allow-Origin' 'https://paaster.io' always;\n        add_header 'Access-Control-Allow-Methods' 'GET,POST,OPTIONS,HEAD,PATCH,PUT,DELETE' always;\n        add_header 'Access-Control-Allow-Headers' 'User-Agent,Authorization,Content-Type' always;\n\n        proxy_pass http://localhost:9000;\n        proxy_set_header Host $host;\n        proxy_set_header X-Real-IP $remote_addr;\n    }\n}\n```\n\n## MinIO\n\n### Install mc CLI\n\n[Follow the official guide](https://min.io/docs/minio/linux/reference/minio-mc.html#install-mc)\n\n### Add instance\n\n```\nmc alias set minio_instance https://s3.paaster.io my_minio_username my_minio_password\n```\n\n### Create bucket\n\n```\nmc mb minio_instance/paaster\nmc anonymous set none minio_instance/paaster\n```\n\n### Get credentials\n\n```\nmc admin accesskey create minio_instance/my_minio_username\n```\n\n### Object storage providers\n\n- [iDrive e2](https://www.idrive.com/e2/) (no free tier anymore)\n- [Wasabi Hot Cloud Storage](https://wasabi.com/hot-cloud-storage/)\n- [Storj](https://www.storj.io/) (25 GB free tier)\n- [Contabo object storage](https://contabo.com/en/object-storage/)\n- [Cloudflare R2](https://www.cloudflare.com/products/r2/)\n- [Amazon S3](https://aws.amazon.com/s3/)\n- [Google Cloud Storage](https://cloud.google.com/storage)\n\n---\n\n# Security\n\n## What is E2EE?\n\nEnd-to-end encryption (E2EE) is a zero-trust encryption methodology. When you paste code into Paaster, it is encrypted locally in your browser using a secret that is never shared with the server. Only people you share the link with can view the paste.\n\n## FAQ\n\n### Can I trust an instance of Paaster not hosted by me?\n\nNo. Anyone could modify the functionality of Paaster to expose your secret key to the server. We recommend using an instance you host or trust.\n\n### How are client secrets stored?\n\nClient secrets are stored in IndexedDB when the paste is created, allowing for paste history. This method of storage makes Paaster vulnerable to malicious JavaScript, but it would require malicious code to be present when the application is built.\n\n### How are client secrets transported?\n\nPaaster uses URI fragments to transport secrets. According to the [Mozilla Foundation](https://developer.mozilla.org/en-US/docs/Learn/Common_questions/Web_mechanics/What_is_a_URL#anchor), URI fragments aren't meant to be sent to the server. Bitwarden also has an article covering this usage [here](https://bitwarden.com/blog/bitwarden-send-how-it-works/).\n\n### How are server secrets stored?\n\nServer secrets are stored in IndexedDB when the paste is created, allowing for modification or deletion of pastes later on.\n\n---\n\n# Cipher\n\nPaaster uses the following libsodium functions:\n\n- `crypto_secretstream_xchacha20poly1305_*`\n- `crypto_pwhash`\n- `crypto_secretbox_easy`\n\nThese are implemented using the [libsodium-wrappers-sumo](https://www.npmjs.com/package/libsodium-wrappers-sumo) library.\n\n---\n\n# Requesting Features\n\n- Open a [new issue](https://github.com/WardPearce/paaster/issues/new) to request a feature (one issue per feature).\n\n### What we won't add\n\n- **Paste editing** — Paaster isn't a text editor, it's a pastebin.\n- **Paste button** — Paaster isn't a text editor. When code is inputted, it will always be automatically uploaded.\n- **Optional encryption** — Paaster will never have opt-in/opt-out encryption. Encryption will always be present.\n\n---\n\n# Support\n\nHave any questions? [Join our Matrix space](https://matrix.to/#/#ward:matrix.org).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwardpearce%2Fpaaster","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fwardpearce%2Fpaaster","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwardpearce%2Fpaaster/lists"}