http-up
raw JSON → 3.2.4 verified Sat Apr 25 auth: no javascript
http-up is a zero-configuration command-line HTTP server with an interface for file uploads, browsing, and online editing. Current stable version is 3.2.4, with frequent releases addressing security vulnerabilities. It supports TLS, basic auth, thumbnails, and office document editing via LibreOffice. Unlike simple static servers (e.g., http-server), http-up enables uploads, file management (copy/move/delete) in extended mode, and online editing of office and code files. The server runs via npx without installation and generates self-signed TLS certs automatically.
Common errors
error npx http-up . ↓
cause Running without any options works by default, but users may expect specific behavior.
fix
Add flags like --port, --basic, --tls as needed.
error Error: EACCES: permission denied, open '/path/to/file' ↓
cause The user does not have write permission to the directory being served.
fix
Run with appropriate permissions or serve a directory you own.
error Cannot find module 'http-up' ↓
cause Trying to import the package as a module, but http-up is CLI-only and not meant for programmatic use.
fix
Use npx http-up or install globally; do not require/import in code.
Warnings
breaking Version 3.0.0 removed the SHARE option, ADMIN console, and file ENCRYPT option. ↓
fix If you relied on these features, do not upgrade beyond 2.x.
breaking Version 3.0.0 disabled database by default. Log output disable option added. ↓
fix Enable database with --database flag if needed.
deprecated The package uses npx for execution; no programmatic API is exported. ↓
fix Use npx http-up or install globally with npm install -g http-up.
gotcha During group COPY or MOVE operations in extended mode, target files/folders are overwritten without confirmation. ↓
fix Ensure target paths are empty or desired before performing these operations.
gotcha Office file editing (docx, odt, etc.) requires LibreOffice installed on the system. ↓
fix Install LibreOffice or avoid editing office files; plain text/code editing works without it.
gotcha TLS mode uses self-signed certificates generated on first run; browsers will show a warning. ↓
fix Accept the self-signed certificate manually in the browser, or use a reverse proxy with a proper certificate.
Install
npm install http-up yarn add http-up pnpm add http-up Quickstart
# Serve current directory with default options
npx http-up .
# Serve a specific directory on a custom port
npx http-up --port 3999 /path/to/fold
# Enable extended mode for file management
npx http-up --extend-mode /tmp
# Enable basic auth (random accounts)
npx http-up --basic .
# Enable TLS and basic auth for secure sharing
npx http-up --tls --basic /path/to/you
# Show help
npx http-up --help