merikuri
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-09-07)
recent important news
- v1.19.8 (2025-09-07) fixed CVE-2025-58753 (a missing permission-check inside single-file shares)
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
🧪 new features
- #1068 #1089 add options to customize which textfiles (readme/prologue/epilogue) to embed above/below directory listings 14bef85b
prologues,epilogues,readmes,preadmes(global-options and/or volflags) accept a comma-separated list of filenames to look for
- #1092 add option th-qv to change the thumbnail quality a1cbac02
- also found and enabled a size-optimization for libvips, so:
- #1092 automatically delete and rebuild thumbnails if thumbnailer-config is changed ca6c4dea
- #1049 add option log-date to display dates in logs 965a4a69
- #1047 rss-feed: title/description of each entry is now a template-string which can reference arbitrary metadata properties (thx @djjeane!) 5e85e3d6
- extend the ramdisk safeguard to also prevent moving files into ephemeral storage fa918228
- would previously prevent creating new files, but this was another potential source for confusion (thx coworker!)
- now possible to customize the
thank you for playingban-message ce2eeba2 - #964 option to change the default value of the
Cache-Controlresponse-header 3bc0bf19
🩹 bugfixes
- #1010 correctly replace illegal characters in filenames according to underlying filesystem ba017f7b
- for example, uploading a folder named COMPLE:X into an exFAT flashdrive on linux is now possible
- and, to make that possible, filesystem-detection now sees the true filesystem behind FUSE (for example ntfs-3g) 3bbed1bc
- audio-playback would skip into the next folder rather than play the rest of the current one if the folder was sufficiently massive 8e2fb05a
- #1094 fix
ipuwith idp users 594ec394 - commandline uploader: fix termsize detection on windows 7d526eab
- #1104 the rss feature now complains loudly if e2d is not enabled (because that was always necessary but not obvious) 92195403
- ui/ux:
- #1102 the option to cosmetically hide server info did not apply for all themes e440578c
- the metadata-property
date(default-disabled) was renamed totdateto avoid colliding with the last-modified timestamp if enabled fecc3fd5
- docs:
- #1070 how to use the bundled archlinux systemd scripts 7f82189d
- podman-systemd: fix paths in guide (thx @emiliatheworst!) a8698392
- synology: better way to hide
@eaDir1b0eb450
🔧 other changes
- add a loud warning in logs if
X-Forwarded-Protois not added by the reverseproxy ad45de94 1b222fb5- almost did the same for
X-Forwarded-Hosttoo before realizing that's generally not a thing
- almost did the same for
- #1038 creating a blank
chpw.jsonbefore starting copyparty is now supported and no longer crashes on startup efc6a09d - #1105 better feedback in the login ui (thx @stackxp!) 08474dbe
- mtag/audio-key.py: replaced the melodic key detector since ffmpeg-8 / alpine-3.23 broke it 67ddc641
- updated deps:
- webdeps: dompurify-3.3.1 e0b04d9c
- copyparty.exe: python-3.13.11 9e64fe02
🌠 fun facts
- 39c3 has a LOT of awesome self-organized sessions
- didn't have anything copyparty-related this time but CCC HYPE!