skjul

skjul /skjuːˀl/ — Danish for hide, conceal, or secret place

Zero-knowledge, end-to-end encrypted pastebin. Self-hostable.

Features

• End-to-end encryption — Server never sees plaintext; keys stay in your browser
• Encrypted attachments — Client-side encrypted file uploads to S3
• Burn after reading — Single-view notes that self-destruct
• Expiry — 30 minutes to 30 days, or indefinite
• Syntax highlighting — 20+ languages, theme-aware
• Share via URL — Keys in fragment (#key=...) never touch the server

Quick Start

Docker (Recommended)

# Download docker-compose.yml and config
curl -O https://raw.githubusercontent.com/bmardale/skjul/refs/heads/main/docker-compose.yml
curl -o config.yaml https://raw.githubusercontent.com/bmardale/skjul/refs/heads/main/config.example.yaml

# Edit postgres password in docker-compose.yml and config.yaml, then start:
docker-compose up -d

• Frontend: http://localhost:8080
• Database: PostgreSQL (credentials in config.yaml and docker-compose.yml)

Build from Source

# Build frontend
cd apps/web && bun install && bun run build

# Copy frontend dist to backend static assets
cp -r dist ../api/internal/static/

# Build backend (embeds frontend)
cd ../api && go build -o skjul ./cmd/skjul
./skjul

Stack

• Frontend: React, TypeScript, shadcn/ui
• Backend: Go, Gin, PostgreSQL
• Crypto: XChaCha20-Poly1305, Argon2id
• Storage: S3-compatible (optional)

⚠️ Security Disclaimer: The cryptographic implementation has not been professionally audited. Use at your own risk for sensitive data.