asxpi/asxpio
asxpi/asxpio
1
0
Fork 0
Code Issues Pull requests Packages 1 Activity Actions

admin: publish files to the public bucket
All checks were successful
Build and Deploy to Production / test (push) Successful in 27s
Details
Build and Deploy to Production / build (push) Successful in 1m3s
Details
Build and Deploy to Production / deploy (push) Successful in 40s
Details

Browse source 
There was no way to put a file up for public use short of running an
S3 client with the uploader key. Add a "files" area to the admin:
upload one or more files, copy the link, edit the note, replace the
contents under the same link, delete. It has its own read/write/delete
permission flags like the other areas, and every action is audited.

The objects go to the storage stack's public bucket and are served by
Garage at s3.asxp.io/public/<key>, not by this app. The app's key can
only put and delete there, so a public_files table is the record of
what was published. Keys get a random prefix: links are not guessable
and names never collide.

That host is same-site with the admin, so a file that can carry script
must not render there. Only a fixed list of types (images, PDF, plain
text, audio, video) is served inline; the rest, HTML and SVG included,
is stored as an attachment. Image metadata is stripped by default, as
for the bingo photos, because of GPS tags.

A per-file limit and a total quota keep the small disk on asxpio-ops
from filling up.

Assisted-by: Claude:fable-5-2
This commit is contained in:
Sergei Poljanski 2026-11-12 05:52:10 +04:00
commit 4c10221727
Signed by: asxpi
GPG key ID: 4F8851660FA4121B
15 changed files with 511 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

6
.env.example
View file

@ -21,5 +21,11 @@ MAIL_TO=ie@asxp.io
# Public bingo hostname (served by the datacenterbingo repo); used here for
# IndexNow pings and admin links only.
# BINGO_HOST=bingo.localhost
# Bucket and public URL prefix for /admin/files; unset = S3_BUCKET and
# S3_PUBLIC_ENDPOINT/<bucket>. Limits in MB (defaults 50 and 2048).
# PUBLIC_S3_BUCKET=public
# PUBLIC_BASE_URL=https://s3.asxp.io/public
# PUBLIC_MAX_MB=50
# PUBLIC_QUOTA_MB=2048
# IndexNow key (8-128 chars, A-Z a-z 0-9 -); unset = no pings, no key file.
# INDEXNOW_KEY=