Generic S3

SafeBucket supports S3-compatible storage providers through the generic s3 storage type. This allows you to use any provider that implements the S3 API, as long as it supports presigned PUT policies and CORS.

Dedicated providers are more optimized

Dedicated storage types (RustFS, MinIO, AWS S3, GCP) are event-driven, they receive real-time notifications when files are uploaded or deleted. The generic S3 type relies on other mechanisms, which are less efficient. Trash is also less optimized, as dedicated providers use lifecycle policies and event notifications to efficiently manage deleted files. If your provider has a dedicated integration, prefer using that over the generic S3 type.

Provider Compatibility

Provider	Presigned PUT	Status
Hetzner Object Storage	Yes	Tested
Storj	Yes	Tested
Garage	Yes	Tested
Cloudflare R2	Yes	Tested
Backblaze B2	Yes	Tested
OVH Object Storage	Yes	Tested
Scaleway Object Storage	Yes	Tested

Hetzner Object Storage

Configuration

STORAGE__TYPE=s3
STORAGE__S3__BUCKET_NAME=safebucket
STORAGE__S3__ENDPOINT=hel1.your-objectstorage.com
STORAGE__S3__EXTERNAL_ENDPOINT=https://hel1.your-objectstorage.com
STORAGE__S3__USE_TLS=true
STORAGE__S3__ACCESS_KEY=your-access-key
STORAGE__S3__SECRET_KEY=your-secret-key
STORAGE__S3__FORCE_PATH_STYLE=false

storage:
  type: s3
  s3:
    bucket_name: safebucket
    endpoint: hel1.your-objectstorage.com
    external_endpoint: https://hel1.your-objectstorage.com
    use_tls: true
    access_key: your-access-key
    secret_key: your-secret-key
    force_path_style: false

• endpoint: <location>.your-objectstorage.com without the scheme. Locations: fsn1 (Falkenstein), hel1 ( Helsinki), nbg1 (Nuremberg).
• external_endpoint: Same as endpoint but with https://.
• force_path_style: false, Hetzner uses virtual-hosted-style URLs.

CORS

Set up CORS using the AWS CLI:

aws configure --profile hetzner

aws s3api put-bucket-cors \
  --profile hetzner \
  --bucket safebucket \
  --endpoint-url https://hel1.your-objectstorage.com \
  --cors-configuration '{
    "CORSRules": [
      {
        "AllowedOrigins": ["http://localhost:3000"],
        "AllowedMethods": ["GET", "POST", "PUT", "HEAD"],
        "AllowedHeaders": ["*"],
        "ExposeHeaders": ["ETag"],
        "MaxAgeSeconds": 3600
      }
    ]
  }'

Replace AllowedOrigins with your actual app URL(s).

Storj

Prerequisites

1. Storj Account at https://storj.io
2. S3 Credentials generated from the Storj console
3. Storage Bucket created in your Storj project

Obtaining S3 Credentials

1. Log in to the Storj Console
2. Navigate to Access → S3 Credentials
3. Click Create S3 Credentials
4. Select your bucket and set permissions
5. Copy the Access Key and Secret Key

Configuration

STORAGE__TYPE=s3
STORAGE__S3__BUCKET_NAME=safebucket
STORAGE__S3__ENDPOINT=gateway.storjshare.io
STORAGE__S3__EXTERNAL_ENDPOINT=https://gateway.storjshare.io
STORAGE__S3__USE_TLS=true
STORAGE__S3__ACCESS_KEY=your-access-key
STORAGE__S3__SECRET_KEY=your-secret-key
STORAGE__S3__REGION=us-east-1
STORAGE__S3__FORCE_PATH_STYLE=true

storage:
  type: s3
  s3:
    bucket_name: safebucket
    endpoint: gateway.storjshare.io
    external_endpoint: https://gateway.storjshare.io
    use_tls: true
    access_key: your-access-key
    secret_key: your-secret-key
    region: us-east-1
    force_path_style: true

• endpoint: gateway.storjshare.io (S3-compatible gateway).
• force_path_style: true, Storj requires path-style URLs.
• Credentials: Generate S3-compatible credentials from the Storj dashboard under Access > Create S3 Credentials.

Regional Considerations

Satellite	Endpoint	Best For
US1	gateway.storjshare.io	Americas
EU1	gateway.eu1.storjshare.io	Europe
AP1	gateway.ap1.storjshare.io	Asia Pacific

Garage

Configuration

STORAGE__TYPE=s3
STORAGE__S3__BUCKET_NAME=safebucket
STORAGE__S3__ENDPOINT=localhost:3900
STORAGE__S3__EXTERNAL_ENDPOINT=http://localhost:3900
STORAGE__S3__USE_TLS=false
STORAGE__S3__ACCESS_KEY=your-access-key
STORAGE__S3__SECRET_KEY=your-secret-key
STORAGE__S3__FORCE_PATH_STYLE=true

storage:
  type: s3
  s3:
    bucket_name: safebucket
    endpoint: localhost:3900
    external_endpoint: http://localhost:3900
    use_tls: false
    access_key: your-access-key
    secret_key: your-secret-key
    force_path_style: true

CORS

Set up CORS using the AWS CLI:

aws s3api put-bucket-cors \
  --bucket safebucket \
  --endpoint-url http://localhost:3900 \
  --cors-configuration '{
    "CORSRules": [
      {
        "AllowedOrigins": ["http://localhost:8080"],
        "AllowedMethods": ["GET", "POST", "PUT", "HEAD"],
        "AllowedHeaders": ["*"],
        "ExposeHeaders": ["ETag"],
        "MaxAgeSeconds": 3600
      }
    ]
  }'

Replace AllowedOrigins with your actual app URL(s).

Cloudflare R2

Configuration

STORAGE__TYPE=s3
STORAGE__S3__BUCKET_NAME=safebucket
STORAGE__S3__ENDPOINT=https://eu.r2.cloudflarestorage.com
STORAGE__S3__EXTERNAL_ENDPOINT=https://<account_id>.eu.r2.cloudflarestorage.com
STORAGE__S3__ACCESS_KEY=your-access-key
STORAGE__S3__SECRET_KEY=your-secret-key

storage:
  type: s3
  s3:
    bucket_name: safebucket
    endpoint: https://eu.r2.cloudflarestorage.com
    external_endpoint: https://<account_id>.eu.r2.cloudflarestorage.com
    access_key: your-access-key
    secret_key: your-secret-key

CORS

Set up CORS using the AWS CLI:

aws configure --profile r2

aws s3api put-bucket-cors \
  --profile r2 \
  --bucket safebucket \
  --endpoint-url https://<account_id>.eu.r2.cloudflarestorage.com \
  --cors-configuration '{
    "CORSRules": [
      {
        "AllowedOrigins": ["http://localhost:3000"],
        "AllowedMethods": ["GET", "POST", "PUT", "HEAD"],
        "AllowedHeaders": ["*"],
        "ExposeHeaders": ["ETag"],
        "MaxAgeSeconds": 3600
      }
    ]
  }'

Replace AllowedOrigins with your actual app URL(s).

Backblaze B2

Configuration

STORAGE__TYPE=s3
STORAGE__S3__BUCKET_NAME=safebucket
STORAGE__S3__ENDPOINT=s3.eu-central-003.backblazeb2.com
STORAGE__S3__EXTERNAL_ENDPOINT=https://s3.eu-central-003.backblazeb2.com
STORAGE__S3__ACCESS_KEY=your-access-key
STORAGE__S3__SECRET_KEY=your-secret-key

storage:
  type: s3
  s3:
    bucket_name: safebucket
    endpoint: s3.eu-central-003.backblazeb2.com
    external_endpoint: https://s3.eu-central-003.backblazeb2.com
    access_key: your-access-key
    secret_key: your-secret-key

CORS

Set up CORS using the AWS CLI:

aws configure --profile b2

aws s3api put-bucket-cors \
  --profile b2 \
  --bucket safebucket \
  --endpoint-url https://s3.eu-central-003.backblazeb2.com \
  --cors-configuration '{
    "CORSRules": [
      {
        "AllowedOrigins": ["http://localhost:3000"],
        "AllowedMethods": ["GET", "POST", "PUT", "HEAD"],
        "AllowedHeaders": ["*"],
        "ExposeHeaders": ["ETag"],
        "MaxAgeSeconds": 3600
      }
    ]
  }'

Replace AllowedOrigins with your actual app URL(s).

OVH Object Storage

Configuration

STORAGE__TYPE=s3
STORAGE__S3__BUCKET_NAME=safebucket
STORAGE__S3__ENDPOINT=s3.sbg.io.cloud.ovh.net
STORAGE__S3__EXTERNAL_ENDPOINT=https://s3.sbg.io.cloud.ovh.net
STORAGE__S3__ACCESS_KEY=your-access-key
STORAGE__S3__SECRET_KEY=your-secret-key

storage:
  type: s3
  s3:
    bucket_name: safebucket
    endpoint: s3.sbg.io.cloud.ovh.net
    external_endpoint: https://s3.sbg.io.cloud.ovh.net
    access_key: your-access-key
    secret_key: your-secret-key

CORS

Set up CORS using the AWS CLI:

aws configure --profile ovh

aws s3api put-bucket-cors \
  --profile ovh \
  --bucket safebucket \
  --endpoint-url https://s3.sbg.io.cloud.ovh.net \
  --cors-configuration '{
    "CORSRules": [
      {
        "AllowedOrigins": ["http://localhost:3000"],
        "AllowedMethods": ["GET", "POST", "PUT", "HEAD"],
        "AllowedHeaders": ["*"],
        "ExposeHeaders": ["ETag"],
        "MaxAgeSeconds": 3600
      }
    ]
  }'

Replace AllowedOrigins with your actual app URL(s).

Scaleway Object Storage

Configuration

STORAGE__TYPE=s3
STORAGE__S3__BUCKET_NAME=safebucket
STORAGE__S3__ENDPOINT=s3.fr-par.scw.cloud
STORAGE__S3__EXTERNAL_ENDPOINT=https://s3.fr-par.scw.cloud
STORAGE__S3__ACCESS_KEY=your-access-key
STORAGE__S3__SECRET_KEY=your-secret-key

storage:
  type: s3
  s3:
    bucket_name: safebucket
    endpoint: s3.fr-par.scw.cloud
    external_endpoint: https://s3.fr-par.scw.cloud
    access_key: your-access-key
    secret_key: your-secret-key

CORS

Set up CORS using the AWS CLI:

aws configure --profile scaleway

aws s3api put-bucket-cors \
  --profile scaleway \
  --bucket safebucket \
  --endpoint-url https://s3.fr-par.scw.cloud \
  --cors-configuration '{
    "CORSRules": [
      {
        "AllowedOrigins": ["http://localhost:3000"],
        "AllowedMethods": ["GET", "POST", "PUT", "HEAD"],
        "AllowedHeaders": ["*"],
        "ExposeHeaders": ["ETag"],
        "MaxAgeSeconds": 3600
      }
    ]
  }'

Replace AllowedOrigins with your actual app URL(s).