Differences

This shows you the differences between two versions of the page.

--- mere-mortal:privatebin [2026/09/21 05:35] – created - external edit 127.0.0.1
+++ mere-mortal:privatebin [2026/09/21 09:10] (current) – external edit 127.0.0.1
@@ Line 1: / Line 1: @@
-====== PrivateBin : Pastie chiffré ======
+====== PrivateBin ======
+===== What is it =====
+PrivateBin is a zero-knowledge paste bin. Everything is encrypted/decrypted in the browser
+using AES-256-CBC — the server never sees the plaintext.
+It was created by Sébastien Sauvage and is open source (MIT).
-**PrivateBin** est un pastebin "zero-knowledge" : les données sont chiffrées côté client (AES-256) avant dêtre envoyées au serveur. Le serveur ne peut pas lire le contenu.
+===== Deployment =====
+ <code docker>
+ service: mere-privatebin
+ image: privatebin/fs:latest
+ container port: 8080/tcp (internal only)
+ volume: fatal_privatebin-data → /srv/data
+ volume: fatal_privatebin-cfg → /etc/privatebin
+ nginx upstream: privatebin:8080
+ </code>
-===== Accès =====
+**Why ''privatebin/fs:latest'' and not ''privatebin/privatebin''?**
+The ''privatebin/privatebin'' image does not include persistent file storage.
+The ''privatebin/fs:latest'' image is built specifically for persistent storage.
-https://privatebin.mere-mortal.net
+===== Issues Encountered =====
+ * **Wrong listen port**: The PrivateBin container listens on port **8080**, not 8888 as initially
+   assumed. The first nginx upstream was configured to ''privatebin:8888'' which caused 502 errors.
+   Fixed by updating the nginx config to point to ''privatebin:8080''.
+ * **Image selection**: Had to search for the correct image — ''privatebin/fs'' is the
+   storage-enabled variant.
-===== Fonctionnalités =====
+===== Current Status =====
+ * Running and accessible at https://privatebin.mere-mortal.net
+ * Pastes are stored on the server's volume and survive container restarts
-* ~~Chiffrement AES-256-GCM~~ côté client
+===== Planned / To Do =====
-* Expiration automatique (10 minutes à 4 semaines)
+ * **Review default settings**: Configure paste expiration, identity enforcement, formatter options.
-* Aucun enregistrement sur le serveur
+ * **Configuration**: The ''/etc/privatebin'' volume is mounted — review the config file.
-* Mode ~~burn-after-reading~~ disponible
+ * **Rate limiting**: Add nginx rate limiting to prevent abuse.