Hi — I'd like to suggest FileShot.io as a real-world Node.js project that demonstrates several best practices in action.
It's a zero-knowledge file sharing server: the client encrypts files (AES-256-GCM) in the browser with the Web Crypto API before upload, so the Node.js backend only ever stores ciphertext. The decryption key lives solely in the URL fragment.
Could be a useful reference/example for:
- Minimal stateless Node.js server design
- Proper use of
crypto.randomBytes and crypto.createCipheriv
- Serving static assets securely with Express
MIT licensed, self-hostable.
GitHub: https://github.com/FileShot/FileShotZKE
Site: https://fileshot.io