SangamDrive

KO | EN

gitlite — search

#javascript #react #typescript #golang #machine-learning #macos #nodejs #java #cli #kubernetes #vue #pytorch #mcp #ios

(★ 10)

Unify multiple Google Drive accounts in one secure dashboard—browse, upload, sync, and manage files while they remain in Google Drive.

SangamDrive Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

<h1 align="center">SangamDrive</h1>

Many Drives. One Sangam. 
 Unify multiple Google Drive accounts into one dashboard — without storing your files.

<a href="#two-ways-to-use-it">Use it</a> ·
 <a href="#screenshots">Screenshots</a> ·
 <a href="#features">Features</a> ·
 <a href="#repository-layout">Layout</a> ·
 <a href="#environment-variables">Env vars</a> ·
 <a href="#self-host-local">Self-host</a> ·
 <a href="#production-deploy-vercel--render">Prod deploy</a> ·
 <a href="#contributing">Contribute</a> ·
 <a href="#credits">Credits</a>

---

**Sangam** (संगम) means *confluence* — many rivers meeting as one.

SangamDrive connects your Google Drive accounts under a single login. Browse, upload, preview, and delete from one place while every file byte stays in **your** Drives. We only store metadata and encrypted OAuth tokens.

> **Inspired by [9Drive](https://github.com/zenhosta/9drive).** Independent project, different stack (Next.js + Supabase + streaming upload service), Google Drive–focused. See [Credits](#credits).

---

## Screenshots

<img src="docs/images/landing.png" alt="SangamDrive landing page — Many free Drives. One Sangam." width="900" />
 
 Landing — product story and Drive unification diagram

<img src="docs/images/dashboard.png" alt="SangamDrive dashboard — storage overview and connected drives" width="900" />
 
 Dashboard — combined storage, connected drives, and recent activity

---

## Two ways to use it

| | Hosted | Self-host |
| --- | --- | --- |
| **Best for** | Trying SangamDrive quickly | Full control / your own domain |
| **You need** | A browser | Supabase + Google OAuth + this repo |
| **Setup** | Sign up on the public app | Copy env templates → fill secrets ([guide](#environment-variables)) → run or [deploy](#production-deploy-vercel--render) |
| **Docs** | Repo **About → Website** (production URL) | This README + [`docs/DEPLOY.md`](docs/DEPLOY.md) |

**Hosted:** use the maintainers’ production instance when the Website link is set on this repo.  
**Self-host:** fork or clone, configure the three env templates below, run locally or deploy to Vercel + Render.

---

## Features

- Connect **many** Google Drives under one SangamDrive account
- **Choose access at connect time:** SangamDrive folder only (`drive.file`) or full Drive (`drive`) — upgrade later by reconnecting
- Combined storage dashboard (used / free across accounts)
- Upload to a chosen Drive — or auto-pick the one with the most free space
- Stream uploads to Google (never buffered onto our disk)
- Sync, My Drive / Shared with me (when full access is granted), virtual folders
- Image, video, audio, PDF, and Drive-doc previews
- Settings + clear quota / rate-limit / reconnect errors
- Fully self-hostable (MIT)

---

## Repository layout

```text
SangamDrive/
├── LICENSE
├── README.md
├── CONTRIBUTING.md
├── SECURITY.md
├── CODE_OF_CONDUCT.md
├── .env.example                 ← env template (root)
├── .github/                     ← CI + issue templates
├── docs/                        ← product & engineering docs
│   └── images/                  ← README screenshots (landing, dashboard)
├── prisma/                      ← shared schema + migrations
├── scripts/                     ← tests + seeds
├── web/                         ← Next.js app (Vercel)
│   ├── .env.example             ← env template (web)
│   ├── app/
│   ├── components/
│   ├── features/
│   ├── lib/
│   └── public/                  ← logos
└── upload-service/              ← Express upload service (Render)
    ├── .env.example             ← env template (upload)
    └── src/
```

---

## Environment variables

Templates ship with **empty values**. Copy each template, fill secrets, **never commit** filled `.env` / `.env.local`.

```bash
cp .env.example .env
cp web/.env.example web/.env.local
cp upload-service/.env.example upload-service/.env
```

| # | Template | Copy to (gitignored) | Used by |
| --- | --- | --- | --- |
| 1 | [`.env.example`](.env.example) | `.env` | Root Prisma CLI |
| 2 | [`web/.env.example`](web/.env.example) | `web/.env.local` | Next.js (Vercel / local) |
| 3 | [`upload-service/.env.example`](upload-service/.env.example) | `upload-service/.env` | Upload service (Render / local) |

### Where to get each value

| Variable | Where to get it | Used on |
| --- | --- | --- |
| `DATABASE_URL` | Supabase → **Project Settings → Database** → Connection string. Use **pooled / Transaction** (port `6543`) for app runtime; use **direct** (port `5432`, host `db.<ref>.supabase.co`) only for `prisma migrate` | Root, web, upload |
| `NEXT_PUBLIC_SUPABASE_URL` / `SUPABASE_URL` | Supabase → **Settings → API** → Project URL | web / upload |
| `NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY` | Same page → **Publishable** (or legacy anon) key. Safe in the browser | web |
| `SUPABASE_ANON_KEY` | Same publishable/anon key (upload-service name) | upload |
| `TOKEN_ENCRYPTION_KEY` | Generate once (command below). **Must match** web + upload. Use a **different** key in production vs local | web + upload |
| `GOOGLE_CLIENT_ID` / `GOOGLE_CLIENT_SECRET` | [Google Cloud Console](https://console.cloud.google.com/) → APIs & Services → Credentials → **OAuth 2.0 Web client** (Drive connect — not the Supabase “Sign in with Google” provider) | web + upload |
| `GOOGLE_DRIVE_REDIRECT_URI` | You choose; must be listed as an **Authorized redirect URI** on that client. Local: `http://localhost:3000/api/accounts/google-callback`. Prod: `https://YOUR_DOMAIN/api/accounts/google-callback` | web |
| `NEXT_PUBLIC_APP_URL` | Your public app origin, **no trailing slash**. Local: `http://localhost:3000`. Prod: `https://sangamdrive.aryasharma.in` (required / fail-closed in production) | web |
| `NEXT_PUBLIC_UPLOAD_SERVICE_URL` | Local: `http://localhost:4000`. Prod: Render service HTTPS URL after first deploy | web |
| `CORS_ORIGIN` | Exact browser origin allowed to call upload API (same string as `NEXT_PUBLIC_APP_URL`) | upload |
| `NEXT_PUBLIC_SUPPORT_EMAIL` | Your support inbox (shown on `/contact`, OAuth consent) | web |
| `UPSTASH_REDIS_REST_URL` / `UPSTASH_REDIS_REST_TOKEN` | [console.upstash.com](https://console.upstash.com) → Redis DB → **REST API** (not TCP). Both required or the app keeps the in-memory limiter | web only (Vercel + local) |
| `PORT` | Local listen port (e.g. `4000`). **Render sets this** — do not hardcode in prod | upload |
| `MAX_UPLOAD_BYTES` / `NEXT_PUBLIC_MAX_UPLOAD_BYTES` | Optional; default 5 GiB. Keep web + upload in sync if you override | optional |

Generate the encryption key once and paste into **both** web and upload env files:

```bash
node -e "console.log(require('crypto').randomBytes(32).toString('base64'))"
```

### File-by-file reference

**1 — Root `.env`**

| Variable | Purpose |
| --- | --- |
| `DATABASE_URL` | Postgres for Prisma CLI (`migrate`, `studio`) |
| `TOKEN_ENCRYPTION_KEY` | Optional at root; keep consistent with services if set |

**2 — `web/.env.local`**

| Variable | Purpose |
| --- | --- |
| `NEXT_PUBLIC_APP_URL` | Public app origin |
| `NEXT_PUBLIC_UPLOAD_SERVICE_URL` | Upload service origin |
| `NEXT_PUBLIC_SUPPORT_EMAIL` | Support / contact email |
| `NEXT_PUBLIC_SUPABASE_URL` | Supabase project URL |
| `NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY` | Browser + server anon key (`NEXT_PUBLIC_SUPABASE_ANON_KEY` also accepted) |
| `DATABASE_URL` | Prisma in API routes |
| `TOKEN_ENCRYPTION_KEY` | AES-256-GCM for stored Drive tokens |
| `GOOGLE_CLIENT_ID` / `GOOGLE_CLIENT_SECRET` | Drive OAuth |
| `GOOGLE_DRIVE_REDIRECT_URI` | OAuth callback URL |
| `UPSTASH_REDIS_REST_URL` / `UPSTASH_REDIS_REST_TOKEN` | Shared rate limits (connect / sync). Omit for single-process local OK |

**3 — `upload-service/.env`**

| Variable | Purpose |
| --- | --- |
| `PORT` | Listen port (local) |
| `CORS_ORIGIN` | Allowed browser origin for `POST /upload` |
| `DATABASE_URL` | Same Postgres project |
| `SUPABASE_URL` / `SUPABASE_ANON_KEY` | Validate caller JWT via `auth.getUser` |
| `TOKEN_ENCRYPTION_KEY` | **Same** as web |
| `GOOGLE_CLIENT_ID` / `GOOGLE_CLIENT_SECRET` | **Same** Drive client as web |
| `MAX_UPLOAD_BYTES` | Optional size cap |

### Rules that prevent “it works locally but not in prod”

| Rule | Why |
| --- | --- |
| Same `TOKEN_ENCRYPTION_KEY` on web + upload | Tokens encrypted by one service must decrypt in the other |
| Same Google Drive OAuth client on web + upload | Refresh / upload use that client |
| Same Supabase project (publishable/anon) | Session JWT must validate on both |
| `CORS_ORIGIN` === `NEXT_PUBLIC_APP_URL` | Browser origin must match exactly (no trailing slash) |
| No **service role** key on Vercel / Render | MVP uses anon + `auth.getUser` only |
| Dev ≠ prod for encryption key, Google client, and Supabase project | Isolate data and tokens |
| Upstash on **Vercel only** | Upload service is one process; Redis not required there |

Full production matrix: [`docs/DEPLOY.md`](docs/DEPLOY.md) · secrets policy: [`SECURITY.md`](SECURITY.md).

---

## Architecture

```text
Browser
  │
  ├─ auth + metadata ──► Next.js (web/) ──► Supabase Auth + Postgres (Prisma)
  │                         │
  │                         └─ rate limits ──► Upstash Redis (optional; Vercel)
  │
  └─ file upload ──────► upload-service/ ──► Google Drive API
```

File bytes are streamed to Google. SangamDrive never keeps them on disk.

---

## Self-host (local)

**Requirements:** Node.js 20+, [Supabase](https://supabase.com) project, Google Cloud OAuth **Web** client (Drive scopes).

```bash
git clone https://github.com/iaryasharma/SangamDrive.git
cd SangamDrive

npm install
npm --prefix web install
npm --prefix upload-service install

cp .env.example .env
cp web/.env.example web/.env.local
cp upload-service/.env.example upload-service/.env
# Fill all three files (see Environment variables above)

npm run prisma:generate
npm run prisma:migrate

npm run dev:web          # http://localhost:3000
npm run dev:upload       # http://localhost:4000/health
```

| Service | Health check |
| --- | --- |
| Web | `GET /api/health` |
| Upload | `GET /health` |

---

## Tests

```bash
npm test                 # unit + isolation tests

# Browser E2E — auth guards, signup terms gate, public pages.
# One-time browser download, then run against a server on :3000
# (reuses a running dev server, otherwise starts `next start`):
npm --prefix web exec -- playwright install --with-deps chromium
npm run test:e2e

# Optional (dev servers running):
# TEST_BASE_URL=http://localhost:3000 npm run test:api-smoke
```

E2E covers flows that need no Google OAuth and no database, so CI runs without secrets. Real Drive behaviour: [`docs/MANUAL_TEST_PASS.md`](docs/MANUAL_TEST_PASS.md).

---

## Production deploy (Vercel + Render)

**Canonical domain:** `https://sangamdrive.aryasharma.in`  
**Detailed playbook:** [`docs/DEPLOY.md`](docs/DEPLOY.md)

### Stack

| Piece | Platform |
| --- | --- |
| `web/` (Next.js) | **Vercel** — Root Directory = `web` |
| `upload-service/` | **Render** — Blueprint `render.yaml`, Free plan (sleeps when idle) |
| Auth + Postgres | **Supabase** — separate **production** project |
| Drive OAuth | **Google Cloud** — new Web client for prod URIs |
| Shared rate limits | **Upstash** REST on Vercel |

### Order (do once)

1. Create prod Supabase → set Auth Site URL + redirect → run migrations (direct DB URL)  
2. Create prod Google OAuth Web client (redirect + origin for the domain below)  
3. Generate a **new** `TOKEN_ENCRYPTION_KEY` (do not reuse local)  
4. Deploy **Render** upload service → copy HTTPS URL  
5. Deploy **Vercel** web (Root = `web`) → set all env vars including upload URL + Upstash  
6. Attach domain `sangamdrive.aryasharma.in` (CNAME in DNS → Vercel)  
7. Re-check Supabase / Google / CORS / `NEXT_PUBLIC_*` match the final domain → redeploy if needed  
8. Smoke test + complete [`docs/MANUAL_TEST_PASS.md`](docs/MANUAL_TEST_PASS.md) on production

### URLs to configure

| Purpose | Value |
| --- | --- |
| App | `https://sangamdrive.aryasharma.in` |
| Supabase Site URL | same |
| Supabase Auth redirect | `https://sangamdrive.aryasharma.in/auth/callback` |
| Google JS origin | `https://sangamdrive.aryasharma.in` |
| Google Drive redirect | `https://sangamdrive.aryasharma.in/api/accounts/google-callback` |
| Web health | `https://sangamdrive.aryasharma.in/api/health` |
| Upload health | `https://YOUR_SERVICE.onrender.com/health` |

### Vercel env (Production)

```bash
NEXT_PUBLIC_APP_URL=https://sangamdrive.aryasharma.in
NEXT_PUBLIC_UPLOAD_SERVICE_URL=https://YOUR_SERVICE.onrender.com
NEXT_PUBLIC_SUPABASE_URL=https://YOUR_REF.supabase.co
NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY=...
NEXT_PUBLIC_SUPPORT_EMAIL=you@example.com
DATABASE_URL=postgresql://...pooler...:6543/postgres
TOKEN_ENCRYPTION_KEY=...          # new prod key
GOOGLE_CLIENT_ID=...
GOOGLE_CLIENT_SECRET=...
GOOGLE_DRIVE_REDIRECT_URI=https://sangamdrive.aryasharma.in/api/accounts/google-callback
UPSTASH_REDIS_REST_URL=https://fancy-duckling-119568.upstash.io
UPSTASH_REDIS_REST_TOKEN=...      # from Upstash console / web/.env.local — never commit
```

### Render env (upload-service)

```bash
CORS_ORIGIN=https://sangamdrive.aryasharma.in
DATABASE_URL=...                  # same pooled URI as Vercel
SUPABASE_URL=https://YOUR_REF.supabase.co
SUPABASE_ANON_KEY=...             # same publishable/anon as web
TOKEN_ENCRYPTION_KEY=...          # same as Vercel
GOOGLE_CLIENT_ID=...
GOOGLE_CLIENT_SECRET=...
# No UPSTASH_* — not used here
```

### DNS

Vercel → Domains → add `sangamdrive.aryasharma.in`, then at your DNS host:

| Type | Host | Target |
| --- | --- | --- |
| CNAME | `sangamdrive` | value shown in Vercel (often `cname.vercel-dns.com`) |

### After go-live

- [ ] Both health endpoints return ok  
- [ ] Sign up / login  
- [ ] Connect Drive (**folder-only** first)  
- [ ] Upload → sync → preview → delete  
- [ ] [`MANUAL_TEST_PASS.md`](docs/MANUAL_TEST_PASS.md) signed off on production  
- [ ] Uptime monitors on both `/api/health` and Render `/health`

Rollback, monitoring, and secrets hygiene: [`docs/DEPLOY.md`](docs/DEPLOY.md).

---

## Contributing

- [`CONTRIBUTING.md`](CONTRIBUTING.md) — how to develop and open PRs  
- [`CODE_OF_CONDUCT.md`](CODE_OF_CONDUCT.md) — community standards  
- [`SECURITY.md`](SECURITY.md) — private vulnerability reports (do not file public issues for token/key leaks)

---

## Brand

| Asset | Path |
| --- | --- |
| Mark | [`web/public/SangamDrive.png`](web/public/SangamDrive.png) |
| Wordmark | [`web/public/sangamdrive-wordmark.png`](web/public/sangamdrive-wordmark.png) |
| Landing screenshot | [`docs/images/landing.png`](docs/images/landing.png) |
| Dashboard screenshot | [`docs/images/dashboard.png`](docs/images/dashboard.png) |

Forks should not present themselves as the official hosted SangamDrive product. A link back to this repo is appreciated.

---

## Docs

| Doc | Purpose |
| --- | --- |
| [`docs/README.md`](docs/README.md) | Docs index |
| [`docs/PRD.md`](docs/PRD.md) | Product requirements |
| [`docs/ARCHITECTURE.md`](docs/ARCHITECTURE.md) | System design |
| [`docs/DESIGN.md`](docs/DESIGN.md) | Visual system |
| [`docs/RULES.md`](docs/RULES.md) | Engineering constraints |
| [`docs/PHASES.md`](docs/PHASES.md) | Build phases |
| [`docs/DEPLOY.md`](docs/DEPLOY.md) | Production deploy (full) |
| [`docs/MEMORIES.md`](docs/MEMORIES.md) | Decisions / project memory |
| `/privacy` · `/terms` · `/acceptable-use` · `/security` · `/contact` | Public legal & trust pages |

---

## Credits

SangamDrive is **inspired by [9Drive](https://github.com/zenhosta/9drive)** ([zenhosta/9drive](https://github.com/zenhosta/9drive)).

Not affiliated. Different stack and Google-only MVP focus. Prefer multi-cloud / S3 gateways today? Use **9Drive**. Prefer a Google confluence you can also self-host? Welcome to **SangamDrive**.

---

## License

[MIT](LICENSE)

---

<img src="web/public/SangamDrive.png" alt="" width="40" />
 
 Many streams. One confluence. Files stay in Google.

SangamDrive

SangamDrive Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

SangamDrive

SangamDrive Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README