Palette
Palette is a fast, self-hosted pastebin. One Go binary, a SQLite database, and a web UI for sharing text and small files.
Note
✨ This project was built by AI — GLM 5.3 Flash on the Hermes Agent harness, with a human in the loop.
Features
- Text pastes and cans (multiple items in one share)
- File attachments (one file per paste, up to 25 MB)
- Password protected pastes
- Expire after a specified time
- Burn after a number of views
- Custom URLs
- Syntax highlighting with language auto-detection (go-enry)
- Public paste listing with search, sort and pagination
- Cookie based saved pastes and settings
- Five base themes (midnight, smooth, pastel-lavender, pastel-peach, pastel-cloud), each with a dark and light variant
- Dark mode toggle in the topbar and settings, with a configurable default
- Polished code viewer: line-number gutter sized to the widest number and pinned during horizontal scroll, optional line wrap, jump-to-top/bottom buttons, and theme-aware scrollbars
Screenshots
![]() |
![]() |
![]() |
![]() |
Get Started
Docker
docker run -p 8080:8080 -v palette-data:/data git.archfox.org/poslop/palette
The SQLite database lives in the /data volume inside the container.
Docker Compose
See docker-compose.yml for a ready-to-use example with every environment variable documented, including which are required (only the /data volume) and which are optional.
Build from source
Requires Go 1.27+.
go build -o palette ./cmd/palette
./palette
# open http://localhost:8080
Configuration
| Setting | Default | Description |
|---|---|---|
PALETTE_ADDR |
:8080 |
Listen address |
PALETTE_DB |
palette.db |
SQLite database path |
PALETTE_MAX_TEXT |
5242880 |
Max paste size in bytes (5 MB) |
PALETTE_MAX_ITEM |
26214400 |
Max can item / file attachment size in bytes (25 MB) |
PALETTE_ADMIN_KEY |
generated | Admin key; if unset a 32-char hex key is generated and persisted to <db-dir>/admin-key (0600) |
PALETTE_DEFAULT_DARK |
dark on | Default dark mode for new visitors. Set false, 0, or off to default to light mode. Visitors who toggle dark mode keep their choice in their browser. |
PALETTE_UNLOCK_SECRET |
random per start | HMAC secret for password-unlock cookies. Set a fixed value to keep unlock sessions across restarts or across replicas. |
An /admin page exists for runtime settings, protected by a key set at
install (PALETTE_ADMIN_KEY env var) and resettable locally. See
API and the design docs in the wiki for details.
API
Full REST API: wiki/API. One example:
curl -X POST http://localhost:8080/api/pastes -d '{"content":"hello"}'
Design docs: wiki/design (e2e encryption, attachments & storage, cookie preferences).
License
Palette is licensed under the GNU Affero General Public License v3.0 (AGPL-3.0-only). See LICENSE.
The software is provided AS IS, without warranty of any kind, express or implied, including merchantability and fitness for a particular purpose. In no event shall the authors be liable for any claim, damages, or other liability, including without limitation any security vulnerabilities, data loss, or legal issues arising from use of the software. You use it at your own risk.
If you run a modified version of Palette as a network service, the AGPL requires you to offer your modified source code to its users.



