FBC Uploader accepts token-authorized uploads without user accounts. Administrators create tokens with upload limits and MIME restrictions. Completed files are available through the admin API or, when enabled, public download links.
Uploads can resume through TUS. A configurable schema validates upload metadata.
mkdir -p ./{config,downloads} && docker run -d --rm --user "${UID}:${UID}" --name fbc_uploader \
-p 8000:8000 -v ./config:/config:rw -v ./downloads:/downloads:rw \
ghcr.io/arabcoders/fbc_uploader:latestOpen the web UI at http://localhost:8000.
Note
If you use Podman instead of Docker, set --user 0:0. With rootless Podman, container root maps to the user who started the container.
Use this compose.yaml to run FBC Uploader:
services:
fbc_uploader:
user: "${UID:-1000}:${UID:-1000}" # change this to your user id and group id, for example: "1000:1000"
image: ghcr.io/arabcoders/fbc_uploader:latest
container_name: fbc_uploader
restart: unless-stopped
ports:
- "8000:8000"
volumes:
- ./config:/config:rw
- ./downloads:/downloads:rwImportant
Set user to your user ID and group ID.
mkdir -p ./{config,downloads} && docker compose -f compose.yaml up -dOpen the web UI at http://localhost:8000.
Note
With Podman, set user: "0:0" and run podman-compose -f compose.yaml up -d.
Configure the service with environment variables prefixed with FBC_:
| Variable | Default | Description |
|---|---|---|
FBC_CONFIG_PATH |
./data/config |
Configuration directory |
FBC_STORAGE_PATH |
./data/uploads |
Directory for uploaded files |
FBC_SUBTITLE_PATH |
unset | Optional external subtitle directory scanned recursively for matching .vtt, .srt, and .ass files |
FBC_SUBTITLE_CACHE_TTL_SECONDS |
300 |
Cache subtitle lookup results per upload for this many seconds, including misses; set 0 to disable |
FBC_ADMIN_API_KEY |
Auto-generated | Admin API key (stored in {config_path}/secret.key if not set) |
FBC_DEFAULT_TOKEN_TTL_HOURS |
24 |
Default token expiration in hours (1-720) |
FBC_CLEANUP_INTERVAL_SECONDS |
3600 |
Interval between cleanup job runs |
FBC_INCOMPLETE_TTL_HOURS |
24 |
Time-to-live for incomplete uploads (0 to disable) |
FBC_DISABLED_TOKENS_TTL_DAYS |
30 |
Days to keep disabled tokens before deletion (0 to disable) |
FBC_DELETE_FILES_ON_TOKEN_CLEANUP |
true |
Delete associated files when cleaning up disabled tokens |
FBC_MAX_CHUNK_BYTES |
94371840 |
Maximum TUS chunk size (90 MB) |
FBC_MAX_REMUX_BYTES |
5368709120 |
Maximum file size eligible for copy-remux to MP4 during post-processing (5GB) |
FBC_POSTPROCESSING_WORKERS |
4 |
Number of uploads processed concurrently in the background post-processing queue |
FBC_EMBED_PREVIEW_CLIP_SECONDS |
300 |
Length of generated bot preview clips in seconds (0 disables preview generation) |
FBC_EMBED_PREVIEW_MIN_SIZE_BYTES |
204472320 |
Only generate bot preview clips for videos at or above this size in bytes (195 MB); 0 disables the feature |
FBC_ALLOW_PUBLIC_DOWNLOADS |
false |
Allow public downloads without authentication |
FBC_TRUST_PROXY_HEADERS |
false |
Trust X-Forwarded-* headers, but only from proxies in FBC_FORWARDED_ALLOW_IPS |
FBC_FORWARDED_ALLOW_IPS |
127.0.0.1,::1 |
Comma-separated trusted proxy IPs or CIDRs allowed to supply forwarded headers |
When running behind a reverse proxy, FBC_TRUST_PROXY_HEADERS=true is not enough on its own. You must also set FBC_FORWARDED_ALLOW_IPS to the proxy IPs or networks that connect directly to FBC Uploader, such as a Docker bridge subnet like 172.23.0.0/16.
If you leave FBC_FORWARDED_ALLOW_IPS at its default, only local loopback proxies are trusted.
Set FBC_SUBTITLE_PATH to an existing directory to enable subtitle discovery on the /f/{token} share page.
Define upload metadata fields, validation rules, types, and UI hints in {config_path}/metadata.json.
The server validates the schema. See metadata.md for full documentation.
A yt-dlp extractor is available in tools/fbc_extractor.py for downloading files directly from FBC Uploader instances using yt-dlp.
Usage:
# Add extractor to yt-dlp plugins directory
mkdir -p ~/.config/yt-dlp/plugins/my_plugins/yt_dlp_plugins/extractor
cp tools/fbc_extractor.py ~/.config/yt-dlp/plugins/my_plugins/yt_dlp_plugins/extractor/
# Download using download token URL
yt-dlp --username key --password YOUR_API_KEY "https://yourdomain.com/api/tokens/fbc_token_here/uploads"
# Or set FBC_API_KEY environment variable
export FBC_API_KEY=YOUR_API_KEY
yt-dlp "https://yourdomain.com/api/tokens/fbc_token_here/uploads"The extractor authenticates using the admin API key and downloads all completed uploads associated with the token.
A standalone Go client lives in tools/client.
It uses only the Go standard library and supports token creation, resumable uploads, downloads, file and token inspection, and upload cancellation.
Tagged releases publish prebuilt Go client binaries for Linux, macOS, and Windows on amd64 and arm64.
Environment variables:
export FBC_PUBLIC_BASE_URL=https://yourdomain.com
export FBC_ADMIN_API_KEY=YOUR_API_KEYBuild:
cd tools/client
go build -o fbc .Build Linux binaries for both amd64 and arm64:
cd tools/client
./build.shExamples:
# Create a token pair
./fbc create --max-uploads 3 --max-size 2G --allowed-mime video/*
# Inspect a token
./fbc info --token YOUR_UPLOAD_TOKEN
# Upload a file with nested metadata
./fbc upload \
--token YOUR_UPLOAD_TOKEN \
--file ./episode.mp4 \
--metadata series.title="Example Show" \
--metadata episode=2
# Or send the same metadata as JSON
./fbc upload \
--token YOUR_UPLOAD_TOKEN \
--file ./episode.mp4 \
--metadata-json '{"series":{"title":"Example Show"},"episode":2}'
# Resume an upload using the existing upload ID
./fbc upload \
--token YOUR_UPLOAD_TOKEN \
--upload-id EXISTING_UPLOAD_ID \
--file ./episode.mp4
# Download a completed file
./fbc download --download-token fbc_download_token --upload-id EXISTING_UPLOAD_IDSee tools/client/README.md for more details.
When public downloads are enabled, viewers can watch or listen to a shared media file together:
- Open a share link and select a video or audio file.
- Click Create party and copy the invite link.
- Send the link to friends. They join automatically when they open it.
See API.md for complete API documentation.
Bug reports are welcome. Please open an issue with:
- Clear description of the problem
- Steps to reproduce
- Expected vs actual behavior
- Environment details (OS, Docker version, etc.)
Note
I am unlikely to accept feature requests. This project serves a specific use case and is maintained primarily for my own needs.