drakkan/sftpgo
Sftpgo
SFTPGo is a multi-protocol file server and secure file transfer gateway that enables the exchange and storage of files via SFTP, FTP, HTTP, and WebDAV. It provides a unified management interface and a web-based file manager for configuring server settings, user permissions, and collaborating on documents.
The project functions as a cloud storage gateway, bridging legacy file transfer protocols to modern backends such as S3, Google Cloud Storage, and Azure Blob. It features an automated data workflow engine that uses dynamic logic and virtual folders to route files and manage data lifecycles across different storage backends.
The system includes a security pipeline with ICAP-based antivirus scanning, PGP encryption, and brute force protection. It also integrates centralized identity management through single sign-on and supports automated SSL certificate renewal via ACME. Additional capabilities include email attachment ingestion via IMAP and event-driven hooks for triggering external scripts.
The application supports deployment within containerized runtime environments.
Features
- Multi-Protocol File Servers - Provides a central server for sharing and transferring files across SFTP, FTP, HTTP, and WebDAV.
- Multi-Protocol Network Gateways - Acts as a multi-protocol gateway translating SFTP, FTP, HTTP, and WebDAV into a unified internal API.
- File Workflow Automations - Automates the movement and archiving of files between storage backends based on dynamic logic and retention rules.
- Cloud Storage Gateways - Provides a gateway that bridges legacy file transfer protocols to modern cloud storage backends.
- Data Lifecycle Management - Implements logic-driven rules for managing data retention, deletion, and movement across storage backends.
- Cloud Storage Wrappers - Provides an abstraction layer to serve remote files from S3, Azure Blob, and Google Cloud Storage as a local filesystem.
- Protocol-to-Cloud Bridges - Bridges legacy file transfer protocols to modern cloud backends such as S3, Google Cloud Storage, and Azure Blob.
- Automated Data Workflows - Routes data across diverse storage backends using dynamic logic, loops, and conditional triggers.
- Storage Backend Integrations - Provides a unified interface for connecting local filesystems, encrypted storage, and various cloud provider backends.
- Secure File Exchange Gateways - Offers a secure environment for data exchange featuring antivirus scanning, PGP encryption, and brute force protection.
- Centralized Identity Management - Consolidates user access control to file services through single sign-on integration with external identity providers.
- File Movement Orchestrators - Uses a logic engine to move and manage files based on dynamic conditions and virtual folder rules.
- Identity Management - Integrates with external identity providers to manage user access via single sign-on parameters.
- Secure File Transfer Gateways - Features a security-hardened gateway with ICAP scanning, PGP encryption, and ACME certificate management.
- Single Sign-On Integrations - Delegates user authentication and authorization to external identity providers using single sign-on protocols.
- Storage Abstraction Layers - Implements a common interface that decouples file transfer protocols from diverse storage backends like local disks and cloud providers.
- Multi-Protocol File Servers - Operates as a unified server for exchanging and storing files using SFTP, FTP, HTTP, and WebDAV.
- Security Scanning Pipelines - Integrates an ICAP-based security pipeline to route data streams to external servers for antivirus scanning and data loss prevention.
- Event Hooks - Provides mechanisms to trigger custom scripts in response to server lifecycle events like startup or disconnection.
- Web-based File Managers - Provides a browser interface for managing server files, collaborating on documents, and configuring permissions.
- Incoming Email Processors - Implements automated extraction of files from incoming emails via IMAP for direct storage.
- Brute-Force Protection - Implements automatic IP banning based on login failure thresholds to prevent unauthorized access.
- ICAP Security Integrations - Integrates with ICAP servers to perform automated antivirus scanning and data loss prevention.
- Rate Limiting & Abuse Prevention - Prevents resource abuse by tracking connection attempts and banning IPs that exceed failure thresholds.
- SSL Certificate Automation - Provides automated request and renewal of SSL/TLS certificates through integration with ACME providers.
- Event-Driven Hook Systems - Triggers external scripts and commands by monitoring server-side lifecycle events such as file uploads and connections.
- File Management - Listed in the “File Management” section of the Awesome Selfhosted awesome list.
- Object Storage - Configurable SFTP server with WebDAV and FTP support.
- Object Storage Servers - Configurable SFTP server with FTP and WebDAV support.
- Server Applications - Configurable SFTP server software.
