py-file-server

Lightweight HTTP file server with a modern web UI. Python 3.10+, no third-party dependencies.

Disclaimer. Provided AS IS, without warranty of any kind, express or implied. Use entirely at your own risk. This tool exposes a folder on your machine over the network: anyone who can reach the port can list and download its files, and an authenticated admin can upload, rename and delete them. The author accepts no liability for data loss, corruption, unauthorised access or disclosure, business interruption, or consequential damages. You are responsible for checking which folder you expose, setting a strong ADMIN_PASSWORD, limiting the server to a network you trust, keeping tested backups, and being authorised to share the files. Not certified for regulated, forensic, safety-critical or high-assurance use. See DISCLAIMER.md; LICENSE is the governing text and prevails where the two differ.

Install

pip install py-file-server

Run

set ADMIN_PASSWORD=yourpassword
py-file-server

pfs is installed as a shorter alias for the same command:

pfs --dir D:\MyFiles

Open http://localhost:8113

Options

py-file-server --port 9000 --dir D:\MyFiles

Environment

Permissions

Anonymous visitors can browse the listing and download files. Uploading, creating a folder, renaming, deleting a file and deleting a folder all require an admin session, and every one of those requests must also carry the session's CSRF token. The upload and New Folder controls are rendered only for a logged-in admin.

Uploads are capped by max_upload_mb in config.json (default 100 MB). A request whose declared body exceeds that cap is refused with 413 before the body is read.

Logging

Access lines and events go to both the console and share.log, a rotating file capped at 5 MB with 5 backups. Clients that drop a connection (a browser opening a speculative socket, or a cancelled download) are recorded at debug level rather than raising a traceback.

Upload settings live in config.json inside the shared folder. The file is created automatically on first run if missing (default: 100 MB max upload, .sh blocked).