iquipe/file_locker_pro repository overview

Zero-Storage Authenticated File Encryption & Decryption System
Military-grade authenticated cryptography with AES-256-GCM, ChaCha20-Poly1305, and AES-256-CBC + HMAC.

⁠About File Locker Pro

File Locker Pro is a containerized, zero-storage web application designed for authenticated, military-grade file encryption and decryption.

It runs on PHP 8.2 + Apache, utilizing PHP's built-in OpenSSL cryptography engine to deliver high-throughput, stream-based authenticated encryption directly in your web browser.

⁠Key Highlights

• Authenticated Ciphers: AES-256-GCM (AEAD), ChaCha20-Poly1305, and AES-256-CBC with HMAC-SHA256.
• PBKDF2 Key Derivation: 100,000 iterations of SHA-256 with a 32-byte cryptographically secure random salt.
• Dual Modes: Password-based or standalone 256-bit Key Files (.flkey).
• Zero-Storage Privacy: No plaintexts or decrypted files are retained. Files are streamed on-the-fly with single-use tokens and automatically unlinked upon download.
• Quick In-Browser Preview: View decrypted images, documents, audio, and text directly before downloading.
• Container Header Inspector: Inspect binary .flocker headers and verify cryptographic integrity without revealing secrets.
• Cyber Dark UI: Sleek glassmorphism dashboard built with responsive Vanilla CSS.

⁠How to Run the Image from Docker Hub

⁠Method 1: Using docker run (Quick Start)

Run the container directly with a single command:

docker run -d \
  --name file_locker_app \
  -p 9980:80 \
  --restart unless-stopped \
  iquipe/file_locker_pro:latest

⁠Method 2: Using docker-compose.yml

Create a docker-compose.yml file on your server or local machine:

services:
  file_locker:
    image: iquipe/file_locker_pro:latest
    container_name: file_locker_app
    restart: unless-stopped
    ports:
      - "9980:80"
    environment:
      - APP_ENV=production
    volumes:
      - file_locker_uploads:/var/www/html/uploads

volumes:
  file_locker_uploads:
    driver: local

Start the service in the background:

docker compose up -d

To stop and remove containers:

docker compose down

⁠🛠️ Configuration & Port Customization

⁠Example: Running on standard HTTP port 80 or 8080:

# Run on port 8080
docker run -d -p 8080:80 --name file_locker_app iquipe/file_locker_pro:latest

# Run on port 80
docker run -d -p 80:80 --name file_locker_app iquipe/file_locker_pro:latest

⁠How to Build and Push to Docker Hub (Maintainers)

If you are building and publishing this image to your Docker Hub account:

⁠1. Build and Tag the Image

# Replace 'iquipe' with your actual Docker Hub username
docker build -t iquipe/file_locker_pro:latest .

⁠2. Log in to Docker Hub

docker login

⁠3. Push the Image

docker push iquipe/file_locker_pro:latest

⁠Security & Privacy Architecture

• Tamper Resistance (AAD): Public header metadata (cipher ID, timestamp, salt, IV) is bound as Associated Authenticated Data (AAD). Any tampering invalidates the cryptographic authentication tag immediately.
• Isolated Uploads: The internal /var/www/html/uploads directory is shielded with .htaccess rules and self-cleaning routines that automatically purge temporary files.

⁠License

Distributed under the MIT License. Free for personal, enterprise, and educational use.

[email protected]⁠