Vaultora – Cloud Storage Hosting Script (Laravel, S3-Compatible API, Stripe, PayPal, Crypto & PayHere)

Vaultora – launch your own cloud storage business with one Laravel script

Vaultora is a complete cloud storage hosting platform. Your customers sign up, choose a plan, pay, and upload files from a polished dashboard or through a REST API and an S3-compatible endpoint. You connect your own storage servers (Cloudflare R2, Amazon S3, Wasabi, Backblaze B2, DigitalOcean Spaces, MinIO or your server's disk) and keep the margin between what customers pay and what your storage costs.

Where are the files stored?

Not in the script and not in the database. When a customer uploads a file, Vaultora checks the plan limits and writes the file to the storage server you connected. The database keeps only names, sizes, owners and link settings. Files are saved under random object names, so a file name never reveals who owns it and two customers can never overwrite each other.

Everything you need to run it

• Customer dashboard: files and folders, drag-and-drop upload with resume, public / signed / password-protected links, buckets, API keys, webhooks, usage charts, billing, team members, referrals and support tickets.
• Developer API: REST API v1 with Bearer keys and multipart uploads, plus an S3-compatible endpoint that works with the AWS SDKs, rclone and presigned URLs.
• Admin panel: revenue and profit after storage cost, customers, plans and coupons, payments, bank-transfer approval, storage servers with bucket moves, payment gateways, abuse reports, affiliates, tickets, pages and FAQ, e-mail templates, system health.
• Payments: Stripe, PayPal, Razorpay, NOWPayments (crypto), PayHere (Sri Lanka, LKR) and bank transfer. Every plan is activated only by a verified, signed message from the gateway.
• Security: Production Lock, mandatory admin two-factor login, IP allow-list, secret admin folder, audit log and security alerts by e-mail, Telegram, Slack or Discord.
• Setup: browser installer, scheduler tasks, database backup, English and Spanish included, illustrated documentation with a screenshot for every step.

Try it with one click

The live demo needs no password: open the demo admin or the demo customer account with a single click. The admin demo is read-only.

• Web hosting with PHP 8.3 or newer (8.3, 8.4) and MySQL 5.7+ / 8.x or MariaDB 10.3+ (SQLite works for small sites)
• PHP extensions: pdo_mysql, mbstring, openssl, tokenizer, xml, ctype, json, fileinfo, curl (gd and zip recommended)
• Apache or LiteSpeed with mod_rewrite (cPanel, hPanel, Plesk, DirectAdmin) or Nginx
• The domain's Document Root must be the public folder (or the product folder, which includes a ready .htaccess)
• No Composer, Node.js or SSH needed: all libraries are included
• To go live: an SSL certificate, one cron job (every minute), an SMTP account, and a storage account (for example Cloudflare R2) or enough server disk space
• Optional: Stripe, PayPal, Razorpay, NOWPayments and PayHere accounts, Google and Facebook apps, ClamAV

Install in about 15 minutes

1. Upload and extract the zip. Point your domain to the public folder inside the product folder and choose PHP 8.3 or newer.
2. Create an empty MySQL database and a user with all privileges.
3. Open your domain: the browser installer checks the server, saves the database details, creates the tables and your owner account, and lets you choose a secret admin folder.
4. Add the cron line shown on the last installer page (every minute).
5. Log in at your-domain.com/<admin folder>/login and set up two-factor login.
6. Connect storage, edit your plans, add the keys of your payment gateways and SMTP, then switch on Production Lock.

Documentation

Open documentation/index.html in the download. It shows every step with screenshots: hosting setup, installer, storage servers, each payment gateway, security, API and troubleshooting. A public copy is linked in the demo section.

Updates

Back up, upload the new files over the old ones (keep .env and storage), then run php artisan migrate --force when the update asks for it.

Version 1.0.1

• Public demo: real one-click sign-in for the customer dashboard and the read-only admin, demo bar, automatic demo reset.
• Fix: admin two-factor setup when 2FA is required.
• Installer and hosting fixes, documentation with screenshots.

Version 1.0.0

• Initial release.