chevereto

Media Servers

Self‑hosted image and video sharing platform that gives you full control over hosting, privacy, and customization

PHP Latest 4.5.5 · 17d ago Security brief →

Features

Support for images, videos, categories, tags, albums with advanced organization
Customizable responsive UI with granular privacy controls and user management
Performance‑focused features: CDN support, caching, image optimization
Extensive API, multi‑language i18n (30+ languages) and full multi‑user/multi‑tenant capability

View all 7 releases →

Config change

4.5.5 Breaking risk 17d

Auth RBAC Breaking upgrade

Tenant isolation mode + UI/behavior changes

Open

Upgrade now

4.5.4 Security relevant 1mo

Auth

JSON leak fix

Open

Review required

4.5.3 Breaking risk 2mo

Auth

FTP/SFTP removal

Open

4.5.2 Breaking risk 3mo

⚠ Upgrade required

Update any deployments using CHEVERETO_TENANTS_API_ALLOW_LIST to CHEVERETO_TENANTS_API_IP_ALLOW_LIST

Breaking changes

Notable features

Added proxy configuration environment variables: CHEVERETO_PROXY_ENTRYPOINT, CHEVERETO_PROXY_IP_ALLOW_LIST, CHEVERETO_ROUTER_SECRET, CHEVERETO_INTERNAL_HOSTNAME, CHEVERETO_SERVICE_NAME, CHEVERETO_SERVICE_PORT, CHEVERETO_HEADER_FORWARDED_HOST, CHEVERETO_HEADER_ROUTER_SECRET
Traefik Cloudflare middleware support
Support for X-Forwarded-Host and X-Router-Secret headers; email_mode setting now optional

Full changelog

Chevereto 4.5.2 (2026-04-21)

Added CHEVERETO_INTERNAL_HOSTNAME environment variable
Added CHEVERETO_PROXY_ENTRYPOINT environment variable
Added CHEVERETO_PROXY_IP_ALLOW_LIST environment variable
Added CHEVERETO_ROUTER_SECRET, CHEVERETO_HEADER_FORWARDED_HOST, and CHEVERETO_HEADER_ROUTER_SECRET environment variables
Added CHEVERETO_SERVICE_NAME environment variable
Added CHEVERETO_SERVICE_PORT environment variable
Added missing root namespace configuration in Traefik configuration
Added support for Traefik Cloudflare middleware
Added support for X-Forwarded-Host and X-Router-Secret headers
Fixed JSON YAML syntax error in Traefik configuration
Improved system notices
Renamed CHEVERETO_TENANTS_API_ALLOW_LIST to CHEVERETO_TENANTS_API_IP_ALLOW_LIST
Setting email_mode is now optional