tusd Resumable Upload Server on Ubuntu 24.04

tusd is the official reference server implementation of tus, an open protocol for resumable file uploads over HTTP. Instead of sending a file in one request that must start again from zero whenever it fails, a tus client creates an upload and then appends bytes to it. If the connection drops, the client asks the server how many bytes actually arrived and continues from exactly that offset. That makes it a strong fit for large media, backups, scientific datasets and any upload from an unreliable mobile or remote network. This cloudimg image runs tusd 2.10.0 from the official release binary on Ubuntu 24.04 LTS as a hardened systemd service.

The appliance uses tusd's local filesystem storage backend, so there is no external database to operate and no cloud storage account to configure before you can accept your first upload. Every uploaded file and its metadata sidecar is written to a dedicated Azure data disk mounted at /var/lib/tusd, so your data sits on a volume you can size, snapshot and back up independently of the operating system disk. The server advertises the creation, creation-with-upload, termination, concatenation and creation-defer-length tus extensions, and any tus 1.0.0 client works against it, including tus-js-client and Uppy in the browser and tus-py-client on the server.

An open upload endpoint is an abuse vector, so this image ships locked down rather than open. tusd is bound to loopback and is never exposed directly; an nginx reverse proxy on port 80 is the only way in and enforces HTTP Basic Auth on every tus method, so creating an upload, querying its offset, appending bytes, downloading it and deleting it all require a credential. That password is unique to each virtual machine, generated on first boot, stored only as a bcrypt hash and written to a root-only file, so no shared or default credential exists in the image and nginx cannot start until the per-machine password has been created. Uploads are capped per upload so no single client can exhaust the disk, and only an unauthenticated health endpoint for load balancer probes is left open.

tusd is distributed under the MIT License, free and open source with no per CPU or per deployment fee. cloudimg is not affiliated with or endorsed by the tus project; tus and tusd are marks of their owners. cloudimg provides packaging, the secure by default configuration, per instance credential automation, security patching, and 24/7 support with a guaranteed 24 hour response SLA.