Skip to content

feat: expose file-storage signed URL downloads through nginx#4

Open
TheRealSeber wants to merge 5 commits intomasterfrom
feat/signed-url-file-storage-access
Open

feat: expose file-storage signed URL downloads through nginx#4
TheRealSeber wants to merge 5 commits intomasterfrom
feat/signed-url-file-storage-access

Conversation

@TheRealSeber
Copy link
Copy Markdown
Contributor

  • Add nginx location /buckets/ that proxies to file-storage with GET-only enforcement (limit_except GET deny all) — write operations remain inaccessible from outside the docker network
  • Add SIGNING_SECRET and ROOT_DIRECTORY env vars to file-storage service
  • Mount file-storage-media volume so uploaded files survive restarts
  • Add FILE_STORAGE_PUBLIC_URL and SIGNED_URL_SECRET_KEY to backend so signed URLs are browser-reachable and signatures match file-storage

TheRealSeber and others added 5 commits March 7, 2026 20:14
- Add nginx location /buckets/ that proxies to file-storage with GET-only
  enforcement (limit_except GET deny all) — write operations remain
  inaccessible from outside the docker network
- Add SIGNING_SECRET and ROOT_DIRECTORY env vars to file-storage service
- Mount file-storage-media volume so uploaded files survive restarts
- Add FILE_STORAGE_PUBLIC_URL and SIGNED_URL_SECRET_KEY to backend so
  signed URLs are browser-reachable and signatures match file-storage

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants