Skip to content

deepdeyiitgn/static-files

BranchesTags

Repository files navigation

🚀 Qlynk Node Master (V09.04.2026 Enterprise Edition)

Version Python Status FastAPI License

💡 Tip: Press Ctrl+F (or Cmd+F) to search this documentation quickly.

Qlynk Node Master is an enterprise-grade, highly secure private cloud storage and streaming datacenter. Engineered to run entirely on Hugging Face Spaces (Free Tier), it acts as a self-sustaining media vault with an integrated Telegram ingestion bot, dynamic anti-hacker defenses, and a cinematic web player.

Built by Deep Dey (12th Grader & JEE Aspirant) 👨‍💻

⚠️ PROJECT STATUS: ACTIVE DEVELOPMENT PAUSED (Effective April 9, 2026)

As of 09.04.2026 (1:20-22 PM IST), all active updates, feature additions, and bug fixes for Qlynk Node Master have been officially stopped. > I am currently in the 12th grade, and I am pausing all my software development projects to dedicate 100% of my focus to my upcoming Annual Exams and my preparation for the JEE Advanced. The goal is IIT Kharagpur CSE. The codebase provided here is stable and enterprise-ready. Thank you to everyone who supported this architecture!

📖 The Story & The Architect

🏢 About This Project (The Qlynk Ecosystem)

Qlynk Node Master was born out of a simple engineering challenge: Can we build a limitless, highly secure SaaS ecosystem without paying for traditional cloud storage? Today, it stands as an autonomous datacenter.

  • The Architecture: It seamlessly merges a high-speed FastAPI backend with an asynchronous Pyrogram Telegram ingestion engine. It uses Hugging Face Spaces (Free Tier) as a massive, synchronized file vault.
  • The Scale: From automatically converting MKV to MP4 using background FFmpeg threads, to processing payments via Razorpay and auto-generating PDF invoices with SVG logos, the entire pipeline is fully self-sustaining.
  • The UI/UX: Everything is controlled via a desktop-enforced Virtual Master OS (Dashboard) that features native Universal Previews for media/code, bulk data wiping, and granular token session management.

👨‍💻 About Me (The Developer)

I am an aspiring software engineer and full-stack developer based in Tripura, India. I specialize in designing scalable cloud architectures, high-performance web servers, and automated digital infrastructure.

  • The Academic Mission: I am currently in Class 12. While I have spent over three years mastering AI, system architecture, and full-stack development, my ultimate goal right now is to crack the JEE Advanced and secure a seat in Computer Science Engineering (CSE) at IIT Kharagpur.
  • My Arsenal: My technical stack includes Python, TypeScript, FastAPI, Pyrogram, modern cloud environments (Vercel, Render), database management, and implementing advanced API security protocols.
  • The Current Status: I have officially placed all my software development projects on a strict hiatus to dedicate 100% of my analytical thinking and problem-solving skills toward Physics, Chemistry, and Mathematics for my upcoming board exams and JEE.

✨ Enterprise Features

  • 🤖 Omniscient Telegram Engine: Upload directly via Telegram. Features an asynchronous queue system (asyncio.Lock) to prevent server crashes, automatic MKV to MP4 optimization via FFmpeg, and native thumbnail extraction.
  • 🛡️ Secure Tokenized Streaming: Original file URLs are never exposed. The system uses dynamic, time-limited tokens with a 4-hour "Rolling Expiry" to prevent piracy and direct downloads (IDM blocks).
  • 🕸️ Anti-Hacker Tarpit (Honeypot): Brute-force protection that feeds fake garbage bytes to unauthorized scrapers/bots while giving them a 200 OK status, effectively wasting their time and bandwidth.
  • 🎬 Cinematic Media Tube: A beautiful, responsive web player with custom visualizers, auto-subtitle conversion (SRT to VTT), Playback Speed controls, Picture-in-Picture (PiP), and Spacebar shortcuts.
  • 📊 God-Mode Telemetry: Real-time WebSockets-powered dashboard (/status) showing core-by-core CPU usage, RAM pool, Network I/O, API latencies, and HF Cloud Quota.
  • ♾️ 24/7 Self-Sustaining: An automated anti-sleep background ping system keeps the HF container alive infinitely.
  • 💳 SaaS Checkout Engine: Built-in Razorpay payment gateway to sell premium streaming tokens. Features anti-spam rate limiting and automatic PDF invoice generation with SVG logos.
  • 🎧 AI Helpdesk & Support System: An isolated ticketing system running via Telegram. Users can raise tickets, talk to an automated AI bot (FAQ matching), or request human admin support directly through the dashboard.
  • ⏳ Dual-Auth & Token Vault: Advanced time-limited share tokens (Basic, Pro, Ultra) with cryptographic signature verification. Generates auto-expiring secure links.
  • 🖥️ Virtual Master OS (Admin Dashboard): A desktop-enforced, highly secured GUI panel to manage the entire datacenter. Includes bulk file wiping, custom token forging (with precise user/session limits), session killing, and live server vitals.
  • 👁️ Universal Preview Engine & Native Rendering: Built directly into the dashboard, a dark-mode modal seamlessly renders videos, audio, images, and code/text files without opening new tabs. Additionally, WebP, SVG, and GIF formats are natively forced to render inline in browsers with auto-generated thumbnails.
  • 🏢 Intelligent Role-Based Routing (RBAC): The core engine dynamically reads cryptographic cookies to differentiate between the Master Admin, Premium Guests, and Public Users. It flawlessly serves raw media for Admin Dashboard previews while automatically routing public users to the frontend cinematic player.
  • 💼 Autonomous Premium SaaS Delivery: Built-in support for "Guest Share Tokens." When customers purchase access, the architecture seamlessly grants them the same high-security 4-hour streaming privileges as the admin, allowing the datacenter to function as an automated commercial streaming platform.

🔒 Security & Cryptography (Military-Grade Protections)

This architecture is fortified with advanced cybersecurity protocols designed to defeat scrapers, brute-force bots, and unauthorized access attempts.

  • 🕸️ The Honeypot (Tarpit) Architecture: Instead of returning a standard 404 Not Found for invalid links, the server intercepts unauthorized bots and returns a 200 OK status while feeding them an infinite loop of generated garbage bytes. This actively exhausts the bot's bandwidth and RAM without consuming actual server storage.
  • 🔄 Moving Target Defense (Dynamic Slug Rotator): A background chron-job autonomously triggers every 6 to 24 hours to entirely wipe and regenerate new 32-character Hex URLs for all files in the database. This makes link-scraping mathematically impossible while safely preserving all internal subtitle and thumbnail linkages.
  • 🛡️ WAF & Exponential Backoff (Fail2Ban Logic): The API is protected by a self-healing IP rate-limiter. If an IP guesses incorrect links repeatedly, they are shadow-banned for 10 minutes, then 30 minutes, and so on. If a legitimate user makes a typo but subsequently enters a valid link, their penalty is instantly reset to zero.
  • ⏳ Cryptographic Token Vault: Original Hugging Face repository paths are permanently hidden. The system generates secure, time-bound access tokens (Basic, Pro, Ultra) with cryptographic signatures. These tokens have a "Rolling Expiry" (e.g., 4 hours) and strict anti-IDM (Internet Download Manager) headers to completely block piracy and direct downloading.
  • 🛡️ Smart Cookie Firewall (Anti-IDOR): Raw CDN file routes are cryptographically shielded. Public scrapers or Download Managers attempting direct access are instantly intercepted and 302-redirected to the secure cinematic player, ensuring 100% piracy protection.
  • 🔑 Dual-Auth Tokenized Streaming: The streaming API seamlessly supports both Admin Master Cookies and rolling Guest Share Tokens, ensuring premium customers get uninterrupted access while public access is firmly denied (HTTP 401).

🛠️ How to Deploy (Build Your Own Enterprise Node)

This architecture is strictly designed to run natively on Hugging Face Spaces (Docker SDK). You do not need an external VPS or paid cloud hosting. Follow these precise steps to deploy your own autonomous media vault:

Step 1: Create the Storage Vault (Database)

The architecture uses Hugging Face Datasets as a limitless, zero-cost private database.

  1. Go to Hugging Face Datasets and click Create new Dataset.
  2. Name it (e.g., qlynk-storage-vault).
  3. CRITICAL: Set the visibility to Private to ensure your data and history.json remain completely secure.
  4. Note down the Repository ID (Format: your-username/qlynk-storage-vault).

Step 2: Create the Main Server (Node)

  1. Go to Hugging Face Spaces and click Create new Space.
  2. Name your space (e.g., qlynk-node-master).
  3. Select Docker as the Space SDK and choose the Blank template.
  4. Keep the Space hardware on the Free Tier (The architecture is optimized to run flawlessly on basic hardware).

Step 3: Configure Environment Secrets

Before pushing the code, you must configure the Master Keys. Go to your Space's Settings -> Variables and secrets -> Secrets and add the following mandatory keys:

Secret Name Description
HF_TOKEN Your Hugging Face Access Token. It MUST have WRITE permissions.
DATASET_REPO The exact ID of the dataset you created in Step 1 (e.g., username/dataset-name).
SPACE_PASSWORD A strong master password. This unlocks the Virtual OS (/dashboard).
TG_API_ID Your Telegram API ID (Get this from my.telegram.org).
TG_API_HASH Your Telegram API Hash.
TELEGRAM_BOT_TOKEN Your Telegram Bot Token (Get from @BotFather).
AUTO_SLUG_ROTATOR Set to false to disable dynamic URL rotation. Useful if you want to use Qlynk as a permanent CDN for your website's profile pictures or CSS assets. Default is true.

Optional Enterprise Secrets (For Monetization):

Secret Name Description
CHECKOUT_TOGGLE Set this to exactly match your SPACE_PASSWORD to activate the Razorpay SaaS Checkout UI.
RAZORPAY_KEY_ID Your Razorpay API Key ID.
RAZORPAY_KEY_SECRET Your Razorpay API Secret.
PROXY_URL Proxy URL if Hugging Face IPs get blocked by external media scraping sources.

Step 4: Clone & Push the Architecture

Open your terminal or command prompt. You will pull the code directly from this GitHub repository and push it to your Hugging Face Space.

# 1. Clone this repository to your local machine
git clone [https://github.com/deepdeyiitgn/static-files.git](https://github.com/deepdeyiitgn/static-files.git)
cd static-files

# 2. Add your Hugging Face Space as a remote origin
# Replace YOUR_USERNAME and YOUR_SPACE_NAME with your actual HF details
git remote add hf [https://huggingface.co/spaces/YOUR_USERNAME/YOUR_SPACE_NAME](https://huggingface.co/spaces/YOUR_USERNAME/YOUR_SPACE_NAME)

# 3. Push the entire architecture to Hugging Face
git push hf main

Once pushed, Hugging Face will automatically read the Dockerfile, build the secure container, and execute the start.sh bootloader. Within 2-3 minutes, your Enterprise Node will be fully operational. You can then navigate to https://hf.space/.../dashboard to access the Virtual OS.

📂 Project Structure & Main Code

Here is where the core logic lives:

  • main.py: The heart of the project. Contains the FastAPI server, Media Routing, Token Streaming, Telegram Bot logic, and the Web UI / Dashboard HTML.
  • bot.py: The background organic ping system that prevents the server from sleeping.
  • start.sh: The bootloader script that starts both the bot.py and the uvicorn FastAPI server.
  • history.json: (Generated at runtime) The central database saving all your file metadata securely on Hugging Face Datasets.

🛠️ How to Build Your Own Server (Deployment)

You can easily deploy your own private streaming node on Hugging Face Spaces for free!

Step 1: Create a Hugging Face Space

  1. Go to Hugging Face Spaces and click Create new Space.
  2. Name your space (e.g., my-private-vault).
  3. Choose Docker as the Space SDK and select Blank.
  4. Set the space hardware to Free.

Step 2: Set up Environment Variables (Secrets)

Go to your Space's Settings -> Variables and secrets -> Secrets and add the following:

Variable Name Description
HF_TOKEN Your Hugging Face Access Token (Must have WRITE permissions).
SPACE_PASSWORD A strong password to unlock your Web UI & Dashboard.
TG_API_ID Your Telegram API ID (get from my.telegram.org).
TG_API_HASH Your Telegram API Hash.
TELEGRAM_BOT_TOKEN Bot token from @BotFather on Telegram.
TG_SESSION_STRING (Optional) Pyrogram session string to unlock true 2GB file upload limits.
PROXY_URL (Optional) Proxy URL if your datacenter IP gets blocked by external sites.
CHECKOUT_TOGGLE Set this to match your SPACE_PASSWORD to enable the Razorpay Checkout UI.
RAZORPAY_KEY_ID Your Razorpay API Key for the payment gateway.
RAZORPAY_KEY_SECRET Your Razorpay API Secret.
YT_COOKIES (Optional) YouTube cookies in Netscape format to bypass age-restrictions or blockades.
DOMAIN_1, DOMAIN_2 (Optional) Whitelist specific domains for CORS (e.g., https://mywebsite.com).
AUTO_SLUG_ROTATOR Set to false to disable dynamic URL rotation. Useful if you want to use Qlynk as a permanent CDN for your website's profile pictures or CSS assets. Default is true.

Step 3: Clone and Push the Code

Clone this repository to your local machine and push it to your newly created Hugging Face Space:

git clone [https://github.com/deepdeyiitgn/static-files.git](https://github.com/deepdeyiitgn/static-files.git)
cd static-files
git remote add hf [https://huggingface.co/spaces/YOUR_USERNAME/YOUR_SPACE_NAME](https://huggingface.co/spaces/YOUR_USERNAME/YOUR_SPACE_NAME)
git push -u hf main

Your server will start building. Once the status says "Running", your private vault is ready!

🆘 Emergency Troubleshooting & Node Diagnostics

Is your datacenter node acting up? Before raising a support ticket, consult this rapid-response diagnostic matrix.

🛑 1. FATAL: Git Exit Code 128 (Build Failure)

  • Symptom: Hugging Face Space fails to build or fetch the repository.
  • Diagnosis: Binary file clash in version control (usually caused by compiled .pyc files).
  • Fix: Delete the __pycache__ folder from your local machine, add __pycache__/ to your .gitignore, commit, and push again. Alternatively, click Factory Rebuild in HF Space Settings.

🔌 2. ERROR 500: Internal Server Error on Boot

  • Symptom: The FastAPI server crashes immediately upon opening the URL.
  • Diagnosis: Missing or misconfigured Environment Secrets.
  • Fix: Ensure DATASET_REPO is correctly typed (username/repo-name) and your HF_TOKEN has strictly WRITE permissions.

🐢 3. NETWORK: YouTube/Instagram Links Failing (Falling back to 308)

  • Symptom: Sending external links to the bot results in an error or fallback redirect.
  • Diagnosis: The Hugging Face Datacenter IP is temporarily rate-limited or blocked by the target platform (YouTube/Meta).
  • Fix: Add a fresh, rotating proxy URL to the PROXY_URL environment secret to bypass the firewall.

🤖 4. BOT: Unresponsive to /index or /connect

  • Symptom: The Pyrogram bot ignores commands in a specific channel.
  • Diagnosis: Missing permissions or wiped memory cache.
  • Fix: Make sure the bot is an Admin in the target channel. If the database was recently wiped, manually forward one message from that channel to the bot so it can learn the Chat ID, then try again.

📱 5. ACCESS: Mobile Dashboard is Locked/Blocked

  • Symptom: Opening /dashboard on a phone shows a Security Lock screen.
  • Diagnosis: Expected behavior. The Master OS is dense with data tables and admin controls.
  • Fix: This is a security and UX enforcement. Please access the Master OS terminal strictly from a Desktop or Laptop browser.

❓ The Omniscient Knowledge Base (50 FAQs)

Click on any question below to reveal the detailed answer.

🏛️ Core Architecture & Hosting

1. What exactly is Qlynk Node Master?
It is a self-sustaining, enterprise-grade private cloud storage and media streaming ecosystem built entirely on Hugging Face Spaces, acting as a zero-cost decentralized datacenter.
2. Do I need to pay for AWS, GCP, or any VPS hosting?
No. The architecture is mathematically engineered to exploit Hugging Face's free Docker SDK tier and free Datasets, giving you a powerful backend without traditional server costs.
3. Is my uploaded data public to the world?
No. If you configure your Hugging Face Dataset visibility to "Private" as instructed, nobody can access your raw files, database, or API without your strict cryptographic tokens.
4. What programming languages power this engine?
The backend is driven by asynchronous Python 3.10+ (FastAPI & Pyrogram), while the frontend UI and Cinematic Player are built with raw HTML, CSS, and Vanilla JavaScript for maximum speed.
5. Can I use a Custom Domain (like mywebsite.com)?
Yes. You can easily map a custom domain to your Hugging Face Space using Cloudflare proxy or Vercel edge functions.
6. What happens if the Hugging Face Space goes to sleep?
Free tier Spaces pause after inactivity. However, the moment a request hits the URL or the Telegram Bot receives a message, the FastAPI server cold-boots in seconds and resumes normal operations.
7. Why is there a Dual-License on this repository?
To protect the Intellectual Property. The code is free for personal, educational, and testing use. However, commercial deployment or SaaS monetization requires a paid enterprise license from the original author.
8. What does "System Hiatus" mean?
The original architect (Deep Dey) is currently in the 12th grade and has locked the repository to focus 100% on the upcoming JEE Advanced examinations. No new features will be added during this period.
9. How is the database managed without SQL?
We use a highly optimized, asynchronous JSON document system (history.json, tg_users.json) that syncs natively with the Hugging Face Hub, bypassing the need for heavy SQL databases.
10. Can I deploy this on Render or Heroku instead?
While possible, the code relies heavily on the huggingface_hub Python library to write data to Datasets. You would need to heavily modify the storage logic to use AWS S3 or local disks if moving away from HF.

🛡️ Military-Grade Security

11. What is the Honeypot (Tarpit) mechanism?
If a scraper bot guesses random file URLs, our server doesn't return a "404 Not Found". Instead, it returns a "200 OK" and feeds the bot infinite garbage bytes, actively crashing the bot's RAM and wasting its bandwidth.
12. Why do my file URLs change automatically?
This is our Moving Target Defense. A background Cron-job rotates the 32-character URLs randomly every 6 to 24 hours to make systematic link scraping mathematically impossible.
13. Can I turn off the dynamic URL rotation?
Yes. Set the Environment Secret AUTO_SLUG_ROTATOR = false. This puts the node into "CDN Mode," keeping links permanent for hosting website assets like CSS or Profile Pictures.
14. How does the IP Banning (Fail2Ban) work?
If an IP hits the honeypot 20+ times, they are shadow-banned using an exponential backoff timer (10 mins, 30 mins, etc.).
15. What if a legitimate user makes a typo and gets banned?
The system is self-healing. The moment the penalized IP successfully accesses a valid, real URL, their penalty strikes are instantly reset to zero.
16. How is the Master Dashboard secured?
The /dashboard route is protected by a strict Header/Cookie authentication system requiring the exact SPACE_PASSWORD defined in your environment variables.
17. Can someone bypass the payment gateway to get tokens?
No. The backend cryptographically verifies the Razorpay signature (Order ID + Payment ID + Secret) before generating and storing the secure token in the database.
18. Are my Telegram messages end-to-end encrypted?
Telegram's MTProto protocol secures the connection between you and the bot. The files are then downloaded to the container and uploaded to HF via HTTPS (TLS 1.2+).
19. Why does the API return JSON by default?
For enterprise interoperability. You can integrate this node directly into other frontends, mobile apps, or CLI tools seamlessly via the /api/rest endpoints.
20. What prevents DDOS attacks on the API?
The payment and checkout APIs are protected by an in-memory Rate Limiter (max 5 requests per minute per IP) to prevent fraudulent spam requests.
20.1. Can users bypass the player and download videos directly using IDM or scripts?
No. The node is protected by a Smart Cookie Firewall (IDOR Protection). If a public user tries to reverse-engineer the URL and access the raw CDN file route (/f/[slug]) for a media file, the server detects the missing Admin cookie and instantly hits them with a 302 Redirect back to the secure cinematic player.
20.2. Do premium users (Guest Tokens) get the same streaming security as the Admin?
Yes. The architecture dynamically verifies dual-auth cookies (Admin auth_token or Guest share_token). Premium users get seamless access to the tokenized 4-hour streaming endpoint, while unauthorized public requests are outright blocked with a 401 error.

📤 Data Ingestion & Storage

21. What is the maximum file size I can upload?
If you configure a Telegram UserBot session, you can upload up to 2GB per file. Via the standard Web API or normal Bot Token, the limit is governed by Telegram's standard limits (50MB).
22. What happens if I upload multiple files at once?
The bot uses an asyncio.Lock() Queue System. It will acknowledge all files but strictly process and upload them one by one to prevent server RAM overflow and crashes.
23. What is the /batch command?
Activating batch mode tells the bot to expect a massive dump of files. It optimizes the queue and suppresses repetitive status updates to keep your chat clean.
24. How do I upload files via YouTube or Instagram links?
Just send the URL to the bot. The integrated yt-dlp engine will download the highest quality media, process it locally, and push it to your private HF Vault.
25. What is the /index deep-scan bypass?
Bots normally cannot read old channel history. The /index command forces the bot to crawl backwards through thousands of messages, map the media IDs, and save them to your database for instant searching.
26. Can I upload non-media files like ZIPs or PDFs?
Yes. The vault supports any MIME type. Non-media files will trigger a standard direct download when accessed via their secure links.
27. What happens if my history.json is accidentally deleted?
The FastAPI lifespan manager will detect the missing database on boot and automatically generate a fresh, empty JSON structure to prevent fatal crashes.
28. How are thumbnails generated?
For Telegram uploads, it extracts native Telegram thumbnails. For WebP/SVG uploads, it uses the image itself. For YouTube, it fetches the MaxRes thumbnail automatically.
29. Where do the files actually live?
In the "Files and versions" tab of the Hugging Face Dataset repository you connected during Step 1 of the deployment.
30. Is there a storage limit on Hugging Face Datasets?
Currently, Hugging Face offers practically limitless storage for Datasets, though massive usage (hundreds of Terabytes) might eventually trigger fair-use flags from their automated systems.

🎬 Cinematic Streaming & Media

31. What makes the Web Player "Cinematic"?
It features a dark-mode UI, dynamic dominant color extraction (the UI changes color based on the thumbnail), audio visualizers, and YouTube-style keyboard logic.
32. Why do MKV/AVI files take longer to process?
Browsers cannot stream MKV files natively. When uploaded, a background FFmpeg worker automatically converts MKV/AVI to MP4 and fixes audio to AAC format for flawless web playback.
33. How does Tokenized Streaming work?
Clicking "Secure Stream" generates a temporary token link (valid for 4 hours). This hides the original dataset URL and protects your bandwidth from direct download scraping.
34. Can Internet Download Manager (IDM) steal the videos?
No. The streaming endpoint uses strict `sec-fetch-dest` header inspection. If a request comes from an external downloader rather than a browser `
35. Does the video stop buffering if I pause for 4 hours?
We use Rolling Expiries. Every time the video player requests a new chunk of data, the 4-hour token timer is automatically extended, ensuring long movies never crash mid-watch.
36. How do I add Subtitles to a video?
Open the Admin Dashboard, go to the vault, click "Add CC", and upload your .srt or .vtt file.
37. Does the player support SRT subtitles?
Browsers natively only support VTT. However, our server automatically converts your SRT files into VTT format on-the-fly before sending them to the browser!
38. Can I adjust the subtitle size?
Yes. While watching a video, press the `+` or `-` keys on your keyboard to scale the subtitle font size dynamically.
39. Does the player have Picture-in-Picture (PiP)?
Yes. You can click the PiP button or press the `I` key to pop the video out and browse other tabs while watching.
40. How does the spacebar fast-forward work?
Just like YouTube, if you press and hold the spacebar, the video speed doubles (2x) instantly. Release it, and it returns to normal speed.

💼 SaaS Checkout & Administration

41. How do I enable the Razorpay Checkout?
Set the CHECKOUT_TOGGLE environment secret to exactly match your SPACE_PASSWORD. This activates the /checkout route for public users.
42. What do users receive after a successful payment?
They immediately receive a cryptographic access token displayed on the screen, and the server generates a personalized PDF Receipt (with your logo) and sends it to their Telegram.
43. Can users log in to multiple devices with one token?
The Token Forge allows you to set concurrent login limits (e.g., max 2 active sessions). If they exceed this, access is denied.
44. How does the AI Helpdesk (/support) work?
Users type /support in the bot. The AI checks their query against your support_faq.json. If a match is found, it replies instantly. If not, it generates a ticket for Human Support.
45. How do I reply to support tickets?
As an admin, you will receive a notification with "Accept" or "Reject" buttons. Clicking "Accept" connects your chat directly to the user, masking your identity as "Admin".
46. What is the Virtual Master OS?
It is the highly-secured /dashboard route. It acts as a desktop-grade operating system to monitor server health, manage files, and revoke user tokens.
47. What does "Clear Active Sessions" do in the dashboard?
If you suspect a user is sharing their token with friends, clicking this button instantly changes the token's cryptographic salt, forcing all currently watching devices to be logged out.
48. What is the Universal Preview Engine?
Instead of downloading files to check what they are, clicking a thumbnail in the Dashboard opens a dark-mode modal that natively plays videos, audio, images, or displays text/code directly.
49. Can I bulk delete files?
Yes. The Dashboard allows you to select multiple files via checkboxes and execute a bulk wipe, permanently deleting them from the Hugging Face dataset.
50. How accurate is the "Server Health" tab?
It uses high-precision telemetry middleware (`time.perf_counter()`) to track real-time API latencies, CPU/RAM limits, and Honeypot metrics directly from the Docker container.

⚖️ Legal Disclaimers & Fair Use Warnings

⚠️ Regarding yt-dlp and Media Extraction: This project utilizes the yt-dlp library solely as a technical demonstration of media routing and extraction architectures.

  • This software is strictly for Personal, Educational, and Archival purposes only.
  • Do not use this tool to pirate, distribute, or infringe upon copyrighted material.
  • The creator (Deep Dey) holds absolutely no liability for how users choose to utilize this software or the content they process through it. You are solely responsible for complying with the Terms of Service of any platform you interact with.

⚠️ Copyright & Licensing Rules (Dual-License Model): This repository operates under a Strict Attribution & Non-Commercial Custom License.

  1. Free for Learning: You are free to fork, read, and deploy this architecture strictly for Personal, Educational, or Testing purposes.
  2. No White-labeling: You CANNOT remove, modify, or hide the attribution, developer credits (Deep Dey / Qlynk), or original copyright notices present in the code, UI, or Footer.
  3. COMMERCIAL USE IS STRICTLY PROHIBITED: Enterprise deployment, use in production environments, or integration into monetized SaaS projects is NOT permitted under this free license.
  4. Enterprise License: If you represent a company or wish to use this architecture for commercial purposes to generate revenue, you must obtain a separate Paid Commercial License directly from the author. Contact me to discuss commercial deployment.

🌟 Final Note from the Developer

Building Qlynk Node Master and taking it to an Enterprise SaaS level has been an incredible engineering journey. If you found this architecture helpful or learned something new about API security, rate-limiting, and Python web servers, please give this repository a ⭐ Star!

Signing off for now. Dreaming of IIT Kharagpur CSE. Keep coding, keep building! 🚀📚

📅 Last System Update (Hiatus Locked): Friday, 10 April 2026 | 01:24 PM IST (GMT+05:30)
🔒 Architecture completely locked and deployed.

About

An enterprise-grade, highly secure private cloud storage and streaming datacenter. Built with FastAPI, Hugging Face Datasets, and a Pyrogram MTProto Telegram bot for seamless 24/7 media ingestion, tokenized streaming, and anti-hacker tarpit defenses.

static.qlynk.me

Topics

python telegram-bot cloud-storage self-hosted cybersecurity video-streaming pyrogram fastapi huggingface anti-piracy

Resources

Readme

License

View license

Security policy

Security policy
Activity

Stars

1 star

Watchers

2 watching

Forks

0 forks
Report repository

Releases 4

🚀 Qlynk Node Master (V09.04.2026 Stable Enterprise Edition) Latest
Apr 10, 2026
+ 3 releases

Contributors

Languages