GitHub - ClueSec/gloomy: Secure hub for curated downloads and QuickDrop links with Firebase-backed auth and storage.

Gloomy is a private file delivery. The aim is simple: secure releases and QuickDrop bursts for short-lived sharing.

Catalogue entries live in Firestore, backed by Firebase Storage and Cloudflare.
Password prompts hash on the client and every download goes through a signed URL.
QuickDrop spins up anonymous uploads with one-minute links and QR codes.

QuickDrop

Upload anonymously at /quickdrop. Files up to 25 MB generate a link that expires in 60 seconds and a QR code for easy device transfers.
Recipients visit /quickdrop/<token> to download once; the link self-destructs immediately after use.
Storage writes rely on Firebase anonymous auth. Keep Cloudflare rate-limiting/managed challenge enabled on /quickdrop routes to mitigate abuse and rely on the built-in per-IP throttle for additional protection.
Unclaimed QuickDrop uploads auto-expire after 10 minutes and are purged from storage.

Extended documentation lives in docs/:.

Name		Name	Last commit message	Last commit date
Latest commit History 54 Commits
.github/workflows		.github/workflows
app		app
components		components
docs		docs
functions		functions
lib		lib
tests		tests
types		types
.gitignore		.gitignore
README.md		README.md
eslint.config.mjs		eslint.config.mjs
firebase.json		firebase.json
generateFiles.js		generateFiles.js
next.config.ts		next.config.ts
package-lock.json		package-lock.json
package.json		package.json
postcss.config.mjs		postcss.config.mjs
tailwind.config.ts		tailwind.config.ts
tsconfig.json		tsconfig.json
tsconfig.test.json		tsconfig.test.json