Vale construir sua versão de Google Drive?

Build a self-hosted personal file locker called "Vault". Single Node.js service, no framework soup.

Stack, non negotiable:
- Node 20 with Fastify and TypeScript
- SQLite via better-sqlite3 for metadata
- Files stored on local disk under DATA_DIR, sharded by the first two chars of a content hash
- Server rendered HTML with Nunjucks plus a little vanilla JS, no React
- Single admin user, password hash in .env, cookie session

In scope:
- Upload via drag and drop, chunked, resumable, files up to 5 GB, using tus protocol or a simple range based chunk endpoint you write
- Content addressed storage: hash on upload, dedupe identical bytes, keep every version of a path
- Folder tree browsing, rename, move, soft delete with a 30 day trash table and a purge command
- Search on filename, extension, size range, and date, all from SQLite
- Share links: random 22 char token, optional expiry, optional download limit, optional password, served from a read only route that streams with correct Content-Type and range support
- Thumbnails for images and PDF first pages using sharp and pdftoppm if present, skipped gracefully if not
- A "vault backup" CLI command that rsyncs DATA_DIR and dumps the SQLite file, plus a "vault verify" that rehashes everything and reports drift

Out of scope, do not attempt:
- Desktop or mobile sync clients
- Multi user accounts, sharing between accounts, permissions matrices
- Document editing or previews beyond thumbnails
- Any cloud service, telemetry, or analytics

Requirements:
- All config in .env: PORT, DATA_DIR, ADMIN_PASSWORD_HASH, SESSION_SECRET, PUBLIC_BASE_URL
- docker-compose.yml with one service and one named volume
- Integration tests covering chunked upload, resume after interrupt, dedupe, share link expiry, and trash purge
- README that states plainly: this is one disk, it is not a backup, here is the restore drill, run it once a quarter