Picture storage
Profile and group pictures are stored in an S3-compatible bucket, such as Backblaze B2, MinIO or AWS S3.
The defaults for S3_ENDPOINT, S3_REGION and S3_CDN_URL point at OpenBeacon's own storage. Set all three to your own.
Set it up
- Create a bucket and set
S3_BUCKET_NAME. - Create an access key and set
S3_ACCESS_KEY_IDandS3_ACCESS_KEY. The scheduled job runner's key also needs permission to delete objects, object versions and delete markers, so it can remove pictures when an account is deleted. - Set
S3_ENDPOINTandS3_REGIONfor your provider. - Set
S3_CDN_URLto the public address pictures are served from. Picture links are built from it.
Give the backend and the runner the same bucket and S3_CDN_URL.
At startup, both check they can list object versions in the bucket, and won't start if they can't.
Privacy
Pictures aren't end-to-end encrypted. Anyone who has a picture's address may be able to view it, depending on how your bucket and CDN are set up.