A user asks about making S3 object storage for uploads private and whether a CDN is necessary for a low-traffic site. pffafman directs them to the Secure Uploads guide. betsys clarifies if enterprise support is required, and pffafman explains that while the feature works, it’s advanced and limited to expert users, with support outside the Enterprise tier being minimal due to complexity and debugging challenges.
We have a Discourse site which requires login. We’d like to move the upload storage to S3, but with the default configuration, URL’s may be shared offsite.
Has anyone firgured out how to make object storage for uploads private? Would it help to put the whole site onto S3?
On a related note, we have a low-traffic site. Are the reasons to require a CDN for object storage just about load and timing, or am I missing something?
thanks much!
See Secure Uploads
Thank you. Does that mean we have to be an enterprise customer for it to work, or that it will work but we have to be an enterprise customer to get support?
We are self-hosting
thanks very much
If you’re referring to this:
It means that you need to have set up S3 and be pretty savvy about how it works. They use it on Enterprise, so you can be sure that it works, but there are a whole bunch of tiny things that you can do wrong that will make it not work; and getting help would require access to your bucket configuration and a whole bunch of other stuff that will make debugging it in a public forum complicated.