HackerNews中文版

大家好，我创建了FolioDoc（<a href="https://foliodoc.com" rel="nofollow">https://foliodoc.com</a>），旨在解决我从会计师和人力资源人员那里听到的一个问题——花费数小时通过电子邮件追赶客户索要文件。您可以创建一个检查清单，添加收件人并设定截止日期，他们将收到一个神奇链接，进入一个简单的上传门户。收件人无需注册账户。随着截止日期的临近，系统会自动发送提醒。我关注的几个方面： - 无需收件人登录——使用SHA-256哈希的神奇链接，原始令牌不被存储。收件人只需点击链接并上传文件。 - 病毒扫描——每次上传都会运行ClamAV。感染的文件会被拒绝，收件人需要重新上传。 - 隐私保护——在欧盟（德国）托管，符合GDPR规定，包含数据处理协议。应用程序和门户中没有追踪功能。 - 安全性——全程使用TLS，5层文件验证（类型、扩展名、魔术字节、大小、配额），每个用户和每个IP都有速率限制，删除操作有完整的审计记录。 - 品牌定制——可以在门户和电子邮件中使用您的logo和主色调进行白标定制。技术栈：Django + DRF，Next.js 14，Celery + Redis，PostgreSQL。门户使用服务器渲染的Django模板（而不是React应用）。单个EC2实例，使用Docker Compose。我在瑞士，花了几个月时间构建这个项目。提供免费套餐。非常希望能得到反馈——特别是关于面向收件人的门户，因为这一部分需要尽可能简单易用。

查看原文

Hey HN, I built FolioDoc (<a href="https://foliodoc.com" rel="nofollow">https://foliodoc.com</a>) to solve a problem I kept hearing about from accountants and HR people — spending hours chasing clients for documents over email.You create a checklist, add recipients with a deadline, and they get a magic link to a simple upload portal. No account needed on their end. Auto-reminders escalate as the deadline approaches.A few things I focused on:No recipient login — SHA-256 hashed magic links, raw tokens never stored. Recipients just click and upload.Virus scanning — ClamAV runs on every upload. Infected files are rejected and the recipient is asked to re-upload.Privacy — EU hosted (Germany), GDPR compliant, DPA included. No tracking in the app or portal.Security — TLS everywhere, 5-layer file validation (type, extension, magic bytes, size, quota), rate limiting per-user and per-IP, full audit trail on deletions.Branding — white-label with your logo and accent color on the portal and emails.Stack: Django + DRF, Next.js 14, Celery + Redis, PostgreSQL. Portal is server-rendered Django templates (not the React app). Single EC2 instance, Docker Compose.I'm based in Switzerland, built this over a few months. Free tier available. Would love feedback — especially on the recipient-facing portal since that's the part that needs to be dead simple.

展示HN：FolioDoc – 我开发了一款工具，旨在帮助用户不再追赶客户索要文件。