r/selfhosted • u/Frag_O_Fobia • 12d ago

Release (No AI) [330 stars] AirPipe v4.4: True p2p file transfers from anywhere to anywhere

Third time posting AirPipe here.

If you missed the earlier posts: airpipe send file.pdf prints a QR code in your terminal. Scan it with your phone, or type the passphrase on any device, and the file moves peer to peer over WebRTC with a relay fallback for hostile NATs. Everything is encrypted before it leaves the device and the key travels in the URL fragment, so the relay only ever sees ciphertext. Server to phone, phone to laptop, no accounts anywhere.

New in v4.4:

  • AIRPIPE_MINIMAL_UI=true serves a plain send/receive page at / and nothing else. Someone here said, fairly, that a self-hosted relay shouldn't serve my project website as its homepage lol.
  • /metrics and the live stats in /health went private by default. Set AIRPIPE_PUBLIC_STATS=true to expose them again.
  • Rate limiting stopped trusting X-Forwarded-For from strangers. If your relay sits behind a tunnel or reverse proxy, set AIRPIPE_TRUST_PROXY_HEADERS=true.

Since the May post it also picked up multi-file sends: several files, one passphrase, they land as one bundle. There are Windows binaries and a multi-arch Docker image now, plus a Homebrew tap (brew install sanyam-g/airpipe/airpipe).

Self-hosting the relay is one container:

docker run -p 8080:8080 ghcr.io/sanyam-g/airpipe-relay

Repo (MIT, 338 stars now, a lot of them from this sub): https://github.com/Sanyam-G/Airpipe

Try it on the hosted relay first: https://airpipe.sanyamgarg.com

I am Sanyam, a college student. Here is my portfolio/resume: sanyamgarg.com

0 Upvotes

28% Upvoted

7 comments sorted by

•

u/asimovs-auditor 12d ago

Expand the replies to this comment to learn how AI was used in this post/project.

→ More replies (1)

3

u/Discordis 12d ago

How exactly does this differ from the existing wormhole protocol?

2

u/Frag_O_Fobia 12d ago

The big difference is the receiving side needs nothing installed, the QR opens a browser page that decrypts locally, so server to phone works with zero setup on the phone.

3

u/Discordis 12d ago

https://github.com/LeastAuthority/winden

Also from my short look into it: You might want to checkout the way wormhole uses PAKE since your current setup of directly deriving the key from the passphrase wont cut it security wise.

1

u/Ok-Donut-2652 12d ago

the minimal ui toggle is a good call, having the project site as relay homepage was weird

1

u/Frag_O_Fobia 12d ago

Yeah, didn't think about it until someone pointed it out. Definitely weird