A self hosted e2e encrypted temporary note sharing application used for sending sensitive information.

A demo of this app can be found at https://ephemeral-whisper.vercel.app

1. bin/generate_env
2. docker compose up

To use this application you need an RSA keypair with passphrase, an IV, and a symetric key value. All values except for the encryption passphrase need to be BASE64 encoded environment variables.

You can use the bin/generate_env script to automatically create a .env file along with the certificate files as a quick way to get started. Once the .env file is created, you can move it to the root directory of this project.

Can be set to any relative filepath such as file:./dev.db

Random string with at least 24 charachters

openssl rand -base64 32

openssl genrsa -des3 -out private.pem 2048 && cat private.pem | base64 When prompted enter the value used for your ENCRYPTION_PASSPHRASE

openssl rsa -in private.pem -pubout -out public.pem && cat public.pem | base64 When prompted enter the value used for your ENCRYPTION_PASSPHRASE

openssl rand -base64 16

In order to automatically purge expired whispers, you will need to set up a cron job that calls GET /api/purge_expired_secrets

Calling this endpoint will automatically purge any whispers that have expired as of the time of the call and utilizes a temporary lock. So it is safe to call as frequently as you want.

You can run the entire app locally using docker compose up

Open http://localhost:3000 with your browser to see the app.

Optionally you can run just the database with docker compose up db and then run the rest of the application locally

You can run the development server directly with yarn dev

You must first make sure you have a Postgres database and add in the URLs to the .env file.

Open http://localhost:3000 with your browser to see the app.

Tests are run using Playwright and have a GitHub action set up to automatically run on pushes to main or PR's.

• Add salting to the encryption
• Component tests
• Make it so the client encryption keys are not required at build time