A self-hosted, drag-and-drop file conversion server.
No database. No cookies. No accounts. No tracking. Nothing leaves your server.
Installation Instructions · Documentation · Docker Image
Every free online file converter is a data collection business. You upload a contract, a medical scan, a CAD drawing of something you have not patented yet, and you have handed it to a stranger with an ad network.
HRConvert2 is the same convenience without the transaction. It runs on hardware you control, converts files locally, and deletes them on a timer you set. Users need no account and leave no trace. It will run on a Raspberry Pi.
- Nothing is transmitted anywhere. Conversions happen on your machine using local tools.
- No accounts, no sessions, no cookies, no database. A user is a temporary directory.
- No tracking of any kind. No analytics, no telemetry, no external fonts, no CDN.
- Files are deleted automatically once they pass the age threshold you configure.
- Every user gets isolated scratch space. Nobody can see anybody else's files.
- Drag, drop, convert, download. That is the entire workflow.
447 file formats across documents, spreadsheets, presentations, images, audio, video, streams, 3D models, CAD drawings, vector graphics, subtitles & archives.
- Optical Character Recognition on PDFs & images.
- OpenSCAD rendering, with every render isolated in an operating system sandbox.
- Live stream capture from
.m3u8playlists, with full SSRF inspection before any fetch. - On-demand virus scanning with ClamAV or scanCore.
- Automatic background virus scanning of every upload, if you want it.
- Temporary share links that expire with the file.
- 26 languages, switchable by the user, built in. No language packs to install.
- 3 interfaces & 7 color schemes, switchable by the user.
- Right-to-left layout support for Arabic, Hebrew, Persian, Urdu & Syriac.
- Installs cleanly alongside WordPress & other software on the same server.
- Every dependency version-checked at runtime, so a broken install says so instead of failing quietly.
HRConvert2 is designed for public-facing deployment, which means it is built to be attacked.
- Uploads are sanitized before any dependency touches them.
- OpenSCAD renders run inside a bubblewrap namespace that can see nothing but the one session directory. OpenSCAD reads arbitrary files by design & cannot be given a sandbox through its own arguments, so the operating system provides one. A server that cannot create that sandbox refuses OpenSCAD conversions rather than falling back.
- Stream files are fully inspected before FFMPEG sees them. Every referenced host is resolved without following redirects, checked against private & reserved address ranges, and pinned by IP so no dependency can be redirected to your internal network.
- Session identifiers are derived from a per-install secret, generated with a CSPRNG at install time & never transmitted.
- Every dependency is version-pinned against known-vulnerable releases.
- Errors are documented. Every numbered error has an entry explaining the cause & the fix in ERROR_DESCRIPTIONS.txt.
Security reports are welcome & are taken seriously. Several of the protections above exist because somebody took the time to find & report a real flaw.
Debian or Ubuntu Linux, Apache 2.4 & PHP 8 or later. Everything else is a package install.
A Raspberry Pi Model B+ is enough to run it. Anything x86 or x64 will be comfortable.
Full dependency list & a step-by-step walkthrough are in the Installation Instructions. A Docker image is also available.
Users switch languages from the interface, or you can force one in config.php, or pass it
in the URL with ?language=de. Every translation ships with the application.
English en |
Français fr |
Español es |
中文 zh |
हिन्दी hi |
العربية ar |
Русский ru |
Українська uk |
বাংলা bn |
Deutsch de |
한국어 ko |
Italiano it |
Português pt |
Tiếng Việt vi |
Türkçe tr |
日本語 ja |
Bahasa Indonesia id |
Polski pl |
Nederlands nl |
Kiswahili sw |
မြန်မာ my |
اردو ur |
فارسی fa |
עברית he |
ܣܘܪܝܝܐ aii |
ܐܪܡܝܐ arc |
Adding a language means adding one folder. The application is built so that communities can translate it for themselves without touching a single line of application code.
Three interfaces ship with the application: Default, Wide & Original. Seven color schemes: red, green, blue, grey, orange, purple & dark.
Users pick their own from the interface. Administrators can lock any of it down in
config.php. Every interface lives in its own folder under /UI & can be forked without
touching the core, so a deployment can carry its own branding.
Supports 457 Formats — click to expand
Mp3, Mp2, Aac, Flac, Ogg, Opus, Wav, Wma, M4a, M4p, Aiff, Ac3, Ac4, Eac3, Alac, Ape, Amr, Au, Caf, Dts, Gsm, Mlp, Oga, Spx, Tak, Tta, Voc, W64, Wv, G722, G726, Aptx, Adx, Shn, Sox & hundreds more. Output bitrate is selectable.
Mp4, Mkv, Avi, Mov, Wmv, Flv, Mpeg, M4v, 3gp, 3g2, Webm, Ogv, Asf, Vob, Rm, Swf, Dv, Av1, H261, H263, H264, Hevc, Dnxhd, Mpegts, Mxf, Nsv, Ivf, R3d, Apng, Cdg, Yuv4mpegpipe & hundreds more.
M3u8. Captures a live stream & converts it into any supported video or audio format.
Doc, Docx, Txt, Rtf, Odt, Pdf.
Csv, Xls, Xlsx, Ods.
Pptx, Ppt, Pot, Potx, Potm, Ppa, Odp, Xps, Oxps.
Zip, Rar, Tar, 7z, Bz, Gz, Bz2, Tar.bz2, Tar.gz, Iso, Vhd, Vdi, Cbr, Cbz. Converts between archive formats & disk image formats.
Jpg, Jpeg, Jpe, Png, Bmp, Gif, Webp, Heic, Ico, Avif, Flif, Cin, Dds, Dib, Gplt, Sct, Xcf. Supports resize & rotate. Photographs of documents can be converted into documents.
3ds, Obj, Collada, Off, Ply, Stl, Gts, Ptx, Dxf, U3d, X3d, Vrml.
Renders .scad source into Stl, Off, Amf, 3mf & Csg. Multi-file assemblies are supported.
Svg, converted with Inkscape. Supports export sizing.
Dxf, Fig, Vdx, Dia, Wpg. Converts drawings into image formats.
Srt, Vtt, WebVTT, Ass, Ssa, Sub, Sbv, Sup, Ttml, Scc, Sami, Vobsub, Mpl2, Mpsub, Pjs, Realtext, Subviewer, Jacosub, Microdvd, Vplayer, Tedcaptions, Dvb & many more.
Reads Jpg, Jpeg, Png, Bmp, Pdf & Gif. Writes Doc, Docx, Txt, Rtf, Odt & Pdf.
More screenshots are in Documentation/Screenshots.
Translations, interface themes & bug reports are all welcome. The application is deliberately modular: a language is a folder, an interface is a folder, & neither requires touching the core.
If you find a security issue, please open an issue. Reports that include a reproduction are worth their weight & have directly shaped this project.
GNU General Public License v3.0.
Free to use, free to modify, free to self-host. If you improve it, send it back.