Zipline v4 Announcement & Ideas

[diced]

Please use this thread for any ideas or features you would like to see in Zipline's 4th major release.

Over this summer (and beyond probably), I will be completely rewriting Zipline, to make it more robust and better for everyone.

Due to this, development will focus only on fixing bugs present in 3.7.0, there will be no more minor releases (bugs fixed will be released under a patch release). You will need to use the upstream versions for any fixes.

Roadmap & FAQ: https://diced.notion.site/Zipline-v4-Roadmap-058aceb8a35140e7af4c726560aa3db1?pvs=4

[PhoenixSheppy]

LDAP authentication would be cool. Perhaps proper multi-domain configuration options? I own domains with (.com) and (.net) suffixes, and having the ability to chose, or randomly select them would be nice.

UI looks nice, but there's infinite possibilities for that, so not much to comment on there.

Maybe a gallery option for non-registered users, something they could look through (from a list of approved images set by upload author, etc.)

[diced]

• idrk anything about ldap
• Multi-domain can be done but it's weird I can elaborate on this if you'd like
• 👍
• I think this would be better of as a folder but maybe

[kashalls]

idrk anything about ldap

Instead of LDAP, try implementing support for authelia or authentik. Both of those have support for it and they allow you to use the OAUTH specification.

[diced]

Authentik is supported in v4, but it was also brought into light that authentik is just a OIDC implementation, you can see in the PR #372.

[Ollie1101]

Ability to whitelist/blacklist file extensions.
Small text spot on the login page for abuse email
Better analytics view (all-time/year/month/week/daily) instead of just 10 days or whatever it is
Better invite system thats integrated into the webui
Per user storage usage/limiter/ratelimter
discord upload bypass pretty please (in discussions already)
discord webhook function that posts the link in a channel so that discord can embed it faster when the user uses the link
video preview in gallery, plays when hovered over
no need for a /u/ (or whatever) in upload links but make sure there's backwards compatibility :)

[PhoenixSheppy]

I really like the idea for the report abuse text, perhaps expand upon that with a fill-able form vs. email since some people prefer not to send emails.

[febryanvaldo]

no need for a /u/ (or whatever) in upload links but make sure there's backwards compatibility :)

So you don't know? you can just use / without /u/ for upload links. So it would be DOMAIN.com/NameofImages.jpg instead of DOMAIN.com/u/NameofImages.jpg. Just edit the UPLOADER_ROUTE=/ in your configuration or docker yaml if you are using Docker.

[Ollie1101]

huh.. i wish i knew this before uploading 30,000 files. cause you cant change it after the fact without getting dead links

[febryanvaldo]

huh.. i wish i knew this before uploading 30,000 files. cause you cant change it after the fact without getting dead links

Yeah, maybe because of the database thing.

[diced]

• this exists already, I think I might add some sort of extension/(white/black)list setting instead of it just being a blacklist
• meh idk
• this is planned, so yeah hopefully
• idk what this is supposed to mean but I did revamp it a bit in the current v4
• planned
• is this referring to the 50mb limit bypass? If so then, yes it is planned
• you can already do this
• like youtube I guess, I don't really know if it's a good idea though
• unfortunately I can't do anything about this - maybe some redirect for those who have already posted links that go to one route

[LypticZ]

ability to checkmark uploads to bulk move into a folder
an video/ audio player
maybe designing options for viewing sites
edit the name of a file
see the file options directly on the dashboard without having to click on the file

a good example imo for design and shit is https://upload.systems

[diced]

• good idea
• not sure what this means? I won't be adding a custom video player since there isn't really anything like different qualities and such that you can do on Zipline's videos
• not sure what this means
• maybe
• this can be done through the table view

[ItzDerock]

Serverless support would be very nice, that way no matter what region someone is in, they get to see the images at blazingly fast speeds. Tasks like stat calculation could make use of vercel cron tasks (maybe generate the json in as part of a vercel build script) but then that leaves other platforms in the dust.

[diced]

This is something I've wanted to do in v4, though I'm not sure it will be possible to support multiple types of serverless platforms (which would be the goal). The way Zipline v3 works, as a lot of functionality within the custom server, and I'm not sure how else it would be done.

[ItzDerock]

you can probably still use a custom server with serverless if you use something like hono instead of fastify, not sure though.

[diced]

I forgot that zipline has a lot of stuff with worker_threads 😔, so I don't think it will be possible to support serverless platforms

[diced]

I was thinking about this earlier, and was thinking about some sort of proxy that would serve images from Zipline, but I'm not sure. It would be a pretty limited Zipline if serverless.

[ItzDerock]

I was thinking about this earlier, and was thinking about some sort of proxy that would serve images from Zipline, but I'm not sure. It would be a pretty limited Zipline if serverless.

what I was thinking is maybe handle just the image serving using serverless. maybe like with cf workers that only respond to the /u/ path or whatever it's set to and everything else just goes to the main Zipline instance.

idrk, it sounds complex but this is definitely something I'd like to see implemented in some form. maybe this could be an extension that advanced users could setup, but Zipline can still run standalone.

[BLACK4585]

Add API integration for Shlink for shortened URLs. I already have a URL shortener, and it would be nice if I could use it. They already have an API. For this, a credentials tab in the settings would be cool.
Here are their API docs: https://api-spec.shlink.io/
Then when uploading new files, you could be able to choose whether to use the Zipline domain or one by Shlink. If you choose Shlink, you are able to set all the settings you want. https://api-spec.shlink.io/#/Short%20URLs/createShortUrl The same goes to shorten URLs via Zipline. Overall, you could go to Shlink directly to create a short URL, but so you have everything in one place.

[BLACK4585]

Yes I know. But imo Shlink is better for this because it is just built for shorten and has way more options. That's why I wrote in the last line that this integration could be also implemented in creating short URLs in Zipline, so everything is in one place.
Also, I want to use my short URL domain for Shlink because, as already mentioned, it has more options to customize the short link. So I don't want to redirect the Domain to Zipline.

[diced]

Adding integration for another url shortening service when Zipline has it's own seems counter-productive. If you would like more options consider suggesting them?

[katanacrimson]

Content warning capability. Blur overlay for images/videos with a textual overlay, potentially custom message indicating why the content is flagged with a warning.

[diced]

not sure what a content warning means? is it like a spoiler and u have to click on it to see the image?

[katanacrimson]

Either a clickthrough or a CSS blur that unblurs on hover, yeah; a content warning could function as a spoiler warning, nsfw content warning, or somesuch.

[vincethepro]

What are you doing to do that for every image or do you want some sort of ai to try to identify it

[katanacrimson]

Let the user specify it for image uploads themselves. Trying to involve AI for that is overcomplicating things.

[spiritLHLS]

I think the API key needs to be given different levels of permissions, can only be used to upload files, can only be used to view files, can files be deleted, etc., to give the operations all a hierarchy.

[diced]

Maybe, I think this is a bunch of stuff that could be added later but not really that important for the major release.

[spiritLHLS]

I don't know exactly how it was developed, I guessed before that it involved the underlying design, so I made this suggestion.
If it's not something that needs to be considered at the outset subsequently it can always be attached and I'll wait patiently.

[ItzDerock]

Prometheus support.
basically add a /stats endpoint with authorization (API key maybe?) and just use node-prom then I can setup Prometheus to scrape that endpoint and get cool grafana dashboard because grafana > the Zipline stats page.

[kashalls]

Should actually be /metrics, and if possible add support for it to be pulled only by an Authorization header.

[kashalls]

How about multi-domain support with https://zipline.diced.sh/docs/guides/upload-options#override-domain except you can specify a URL path for that domain. I know you can do this with nginx by rewriting the target path /(.*) with /path/$1 but when uploading using the ShareX uploader it still adds that http(s)://files.example.com/path/AuLOs1.png. The recommended fix for changing UPLOADER_ROUTE to / wouldnt exactly work because it enforces it on all domains.

So TLDR, add an option to override the path too?

[diced]

maybe

[tigattack]

Searching files by name (and, as an awesome stretch, tags) as mentioned in #282 would be amazing and make this so much more usable for me.

I can't speak for others, but since the OAuth PR was merged, lack of search is the only thing holding me back from migrating to Zipline at this point.

Also, is there a technical reason for removing the ability to view EXIF metadata? This is really useful and I'd love to see it stick around in v4.

[diced]

• I think all of this except tags is introduced in v4 as of now (i will work on tags later)
• good to hear! what are you using currently?
• Kind of(?), viewing exif required a library that called a executable and was pretty clunky and I didn't like how it worked. The new way just reads the files bytes and removes GPS metadata. So now we can't view exif metadata - and I thought it was a fair tradeoff since the amount of people wanting to view exif metadata would be pretty small. Unfortunately you are one of the people in that small group, I would like to hear what metadata you would even look at (imo I think its just useless unless you upload pictures from your phone, digital cameras, etc)

[tigattack]

• That's great to hear, thanks!
• I currently use XBackBone, it's nice but it's beginning to feel a little clunky compared to the more recent solutions such as Zipline, and overall has fewer features.
• That makes sense, now I understand why you felt that way about EXIF support! I will fairly often be uploading images from various cameras so yes, I fall into the subset of users who would still find that useful, but it is something I can live without. The ability to strip GPS coordinates is great; I would appreciate the option to strip all EXIF data from images, but I'm guessing if you were to implement this then you'd essentially be back where you were before in terms of calling binaries and so on.

[XeroxDev]

Hey! I didn't knew if I should open a new one or write it down here, but I guess here's the right location. I've multiple things I noticed and I would love to see as well:

1. Being able to edit / rename shortened urls (and of course the target location). Currently I've to delete the old one and then create the same one with a different target.
2. I would love to bring up Feature Request: Edit Text Files  #175 again. This would really be awesome.
3. Being able to rename files (especially for syntax highlighting, because if I upload text via ShareX, it's always a .txt file and therefore has no syntax highlighting)
4. Overall being able to modify / edit / change things on already uploaded files and folders (I only ever see: Delete, Open, Copy link, ...)
5. Nice to have: While uploading text with ShareX, detect/predict automatically which file type / programming language / syntax highlighting. Because like mentioned in 3. it's always a .txt file.

I think you can see, those are mostly about editing stuff. I really miss editing stuff afterwards instead of having to delete and reupload it again.

But despite this, great work, really love it! Keep up with this awesome work.

[freakshock88]

Perhapt slightly related to this request, today I tried to upload an html file to zipline and view the result in the browser. The result was not the rendered HTML page like I expected, but a code view of the html text. Could it be supported to show the rendered HTML page?

[aumer-amr]

+1 for the being able to edit short urls, to add / edit vanity url as an example.

[katanacrimson]

Perhapt slightly related to this request, today I tried to upload an html file to zipline and view the result in the browser. The result was not the rendered HTML page like I expected, but a code view of the html text. Could it be supported to show the rendered HTML page?

That would be exceedingly dangerous and not recommended due to how it opens up domain-level exploits (i.e. cookie & session theft), phishing vectors, and more.

[diced]

Perhapt slightly related to this request, today I tried to upload an html file to zipline and view the result in the browser. The result was not the rendered HTML page like I expected, but a code view of the html text. Could it be supported to show the rendered HTML page?

As @katanacrimson said it is dangerous, but I think you can view the html by just going to the /r/* route? I might be mistaken though.

[diced]

As for the other suggestions, feel free to look at the roadmap to see if anything was added :)

[Cloudzik1337]

Allow admin make invite waves
it would give each user for example 2 invites (configurable)
then users would spread invites gamesense.pub like
invites would be trackable and each user would have uid

[TacticalTechJay]

That's an amazing idea! I gotta try adding it...

[iiTranquility]

I'd love to see this feature too, I was gunna suggest but I saw this instead.

[Felitendo]

What I would really like to be added in Zipline is a way for me to choose wich files go in wich folder. For Example I want .exe Files to be transferred automatically to the Folder "exes" and ".png, .jpg" to the folder named "pictures". It would be so cool to have a way to change this :)

[dotcomUNDERGROUND]

Feature Request: URL Upload

Uploading a file with is URL would be great.

[Permanently]

You can already do this on ShareX.

I also think this could open up a can of worms full of vulnerabilities.

[diced]

Yeah, gonna stick with just file uploads for now.

[barsa2000]

feature request: make zipline a pwa so it's faster to use with a phone

it's not a complex feature to add, just needs a <link> tag in the _document.tsx and a manifest.json to be implemented

docs: https://developer.mozilla.org/en-US/docs/Web/Progressive_web_apps/Guides/Making_PWAs_installable

[diced]

I think this would be cool to add in, I'll take a look and see how things can be implemented soon.

[barsa2000]

Yeah, it's really easy to implement and nice to have, I implemented it locally if you want I can just create a PR

[diced]

I did a bit of research, it even looks like you can make share targets (like right clicking on a file in explorer > open with > zipline, or on phone just selecting the zipline pwa). I'll also add this in if it seems to work well :)

https://developer.mozilla.org/en-US/docs/Web/Manifest/share_target

[diced]

alright a62e03b

this commit on v4 now has it, all the title fields and description are configurable in settings and the theme/background color as well.

decided to skip out on share_handler and file_handler since tbh they seem a bit annoying to implement, maybe in a future stable release I will add that in.

[barsa2000]

Nice! I'll try it out later!

Also I don't know if the effort of implementing the share share target part is even worth it right now, it doesn't have much compatibility outside of chrome (and chromium based browsers I guess) and in general on iOS

[ptraced]

@diced v4 soon?

[matejdro]

When using Original File Name option, also show original file name in the UI, not just when downloading (from #631)

[diced]

ui already tells you the original file if it exists in v4

[Kolton-LuckyVR]

The ability to create temporary "upload" links to allow guests to upload a single file to an account without having to share the password.

This would be useful for allowing that random friend of yours to share a file with you or others without having to create an entire account for them.

[matejdro]

Feature request: "Login me forever" checkbox next to login or some other way to stay logged in. v3 seems to keep logging me out periodically.

[diced]

The default cookie expiration is 7 days, I don't really use my instance so logging in every once in a while is fine for me, but I can probably increase it to 2 weeks. If the cookie is expiring before 7 days it might be a browser issue.

[matejdro]

Can we have an option to increase it significantly over 2 weeks? Like maybe for a year?

[Loapu]

Will there be the possibility again to have your own S3 compatible storage aside from AWS? Because as I see it today, only AWS is supported in v4.

[diced]

how did you get to that conclusion? any s3 compatible service will most likely work

[Loapu]

I did get to that conclusion by trying to use the new Hetzner object storage without it working.

As far as I can tell, the reason is that there is no possibility to set your own S3 URL.

After digging around in the source code, I could see that the environment variable from v3 was missing in v4.

[diced]

oh sorry my bad 😭, I thought you were talking about v3 for some reason (even though this is a v4 thread lol, it was like 1am). i'll have a commit coming out that lets you specify an endpoint.

I also took a quick look at the hetzner docs, and you will want to set the endpoint to look something like this https://fsn1.your-objectstorage.com, and the region should also be fs1 (obviously that depends on the region you are using, fs1, hel1, etc).

[Loapu]

Ah, glad we got that sorted. :) I'm looking forward to the commit.

[Loapu]

Alright, after the latest commit (as of this comment) I got the following error after starting the stack the second time (after commenting out the entrypoint command): [2024-12-25T10:23:13 ERROR migrations] failed to apply migrationsError: P3005

[matejdro]

Ability to rename/label the file after the upload would be nice.

[Thusuzzee]

I have two feature requests

1. Ability to set different (sub)domains for file uploads and URLs

For example:
up.example.com - for file uploads
url.example.com - for URLs

While I know you can override the domain in the ShareX configuration file, I tend to use Zipline's dashboard to create shortened URLs. However, it defaults to up.example.com for me.

2. Ability to allow anyone to upload files to a user's folder

This might be out of scope of Zipline, but what I mean by this feature is:
You can share a link to a folder you created on Zipline's dashboard, and everyone with the link can upload files via drag-and-drop. This feature could also be password protected. It would primarily be used for smooth file transfer between two users.

[mrpops2ko]

oh i saw something in your roadmap that mentions

• Generate Flameshot script for MacOS
  • Uses pbcopy instead of xclip/xsel
  • I can’t really test this because I don’t have a mac, but it should just be a drop in replacement 😃

none of those kinds of scripts will work for uploading images, or well they will but its really cumbersome and most people won't bother doing it. The problem is that Mac has a bunch of security tabs which you have to approve usage of apps in other apps. So when you use a script to pipe say your screenshot into terminal to then upload with curl, you'll be prompted for whatever application you are using saying 'please enable terminal access to this app in security settings.'

The Dropshare application supports APIs in the most recent update, so i'm using that now in order to accomplish uploads.

[diced]

I think i'll still keep that option available, but maybe reference other apps that can do the same thing in the documentation maybe - again I don't really know of what would work lol

[Sando420]

Sorting options? Right now I can only sort in the Home tab but there's no way to sort in files tab or inside folders

[dotcomUNDERGROUND]

Can you consider adding function to upload by URL?

So when sharing a file hosted elsewhere, instead of first downloading and then uploading again, I can just upload it with the file URL.

Together with auto delete expired files, this will complete my requirement for a file sharing system.

[ptraced]

Starting to think this isn't coming which disappoints me trying to leave XBackBone

[diced]

what makes you think that?

[Loapu]

Yeah, look at the commit history for v4: https://github.com/diced/zipline/commits/v4/
diced is constantly adding new things.

[huzzyz]

Congrats on the v4 release. Kudos! being able to modify the configuration from the webui is a fantasitc enhancement. Its great now that password can be disabled for protected file. Was wondering if it would be possible to view the password set as well.

Thank you once again.

[diced]

the passwords are asymmetrically hashed so u can't view them

[huzzyz]

Appreciate the response, thank you.

[diced]

❤️ thanks everyone for giving me ideas! I will be closing this discussion now, if you want to suggest new features just do as usual by creating a new discussion post.