ELX-Cloud
A file cloud on a server you control
A browser interface with drag and drop, sharing by link and between users, and the same files over FTP, FTPS and WebDAV. Photos, video and music play in place, text files are edited in the browser, and everything lives in one SQLite file next to the binary.
One binary, one database
No web server to configure, no database to install, no image library to compile. The interface and the assets are inside the executable and the state is a single SQLite file, so backing the whole system up means copying two things.
Photographs open instantly
Thumbnails are prepared in the background and cached on disk, so a folder with thousands of pictures opens as quickly as an empty one. Background work always leaves one core free for the interface.
Three ways to the same files
The browser, FTP and FTPS, and WebDAV as a network drive — the same credentials, the same permissions, the same quotas and the same trash for all three.
Locks that are not the login password
Any folder or file can carry its own password, either hiding it completely or merely preventing changes. Protection follows the folder when it is renamed and applies to everything inside it.
Links you can limit
A public link can have a password, an expiry date and a download counter, and can accept uploads from guests. Every link you have issued is listed in your profile with one button to revoke it.
An Android client
Files, favourites, links, trash and automatic photo upload from the phone. Administration deliberately stays in the browser.
Working with files
- Drag and drop uploads, whole folders included — the structure is preserved.
- Three views: a table, small tiles, and large tiles with photo thumbnails.
- Photographs open in a window, expand to full screen on a double click, and the arrow keys page through the folder.
- Video and music play in place — seeking, volume, full screen and download in the same window, and playback stops when you close it.
- Text files and source code open with syntax highlighting, a choice of encodings, editing and save on Ctrl+S.
- The right mouse button opens a context menu, and the usual keys work: Ctrl+C, Ctrl+X, Ctrl+V, F2, Del, Ctrl+A.
- Folders download as ZIP; search covers names across the archive.
- Favourites collect the folders you return to, at any depth.
Converting on the server
HEIC and PNG images convert to JPEG, and AVI and MOV video to MP4. Select the files, choose Convert, set the quality and decide whether the originals go to the trash.
The format is detected by looking inside the file rather than at its extension: a photograph named .heic that already contains JPEG is simply renamed, because re-encoding it would lose quality for nothing.
Sharing
| Way | What the recipient gets |
|---|---|
| Public link | A page with the file or folder; optionally behind a password, with an expiry date and a download count |
| Link that accepts files | The same page, with the ability to upload — useful for collecting material from somebody without an account |
| To another user, read only | The folder appears in their “Shared with me”, and under /shared over FTP |
| To another user, read and write | The same, with the ability to change what is there |
FTP, FTPS and WebDAV
The same account works over all three. FTPS uses the web interface's own certificate — including a Let's Encrypt one — so clients connect without warnings. Passive mode has a configurable port range, and quotas and permissions apply exactly as they do in the browser.
WebDAV mounts the storage as a network drive at /webdav. It is switched off by default: not everybody needs it, and an unused open path to the files is a risk with no benefit.
Folders that already exist on the server
An archive that lives elsewhere on the machine does not have to be moved into the storage. The administrator attaches the folder by path, decides who sees it and whether it is read-only, and everything ordinary works inside it: viewing, uploading, renaming, search and public links.
- By default an attached folder is visible only to the person attaching it — an accidental “all users” would expose somebody else's archive.
- Deletions go to a trash inside the attached folder itself, so nothing is copied across disks to be deleted.
- Space in an attached folder does not count against quotas.
- System directories cannot be attached, and paths inside an attachment cannot escape it.
- Permissions are checked by trying, not by guessing: the service reads and writes a test entry, and grants itself access to that folder alone if it is missing.
Security
- Failed attempts are counted across the web interface, FTP and WebDAV together, because an attacker does not care which door is which.
- The threshold is zero — disabled — out of the box: a mechanism able to lock the owner out is one you switch on deliberately, after putting your own network on the allow list.
- The allow list wins over the block list, and addresses on the local network are never blocked automatically under any setting.
- The login log records who, from where, when and how it ended; failures are always recorded, successes optionally.
- Locating an address by country is possible but off by default, because doing it means sending that address to somebody else's service.
At a glance
- Protocols
- HTTP and HTTPS, FTP and FTPS, WebDAV
- Operating systems
- Debian, Ubuntu, Windows
- Storage
- Files on disk, metadata in SQLite
- Certificates
- Let's Encrypt, your own files, or self-signed
- Optional tools
- ffmpeg for video, heif-convert for HEIC
- Memory ceiling
- Configurable, 768 MB by default
- Mobile client
- Android
- Public registration
- None — accounts are created by the administrator