BookStackApp / BookStack

A platform to create documentation/wiki content built with PHP & Laravel
https://www.bookstackapp.com/
MIT License
15.43k stars 1.94k forks source link

Additional storage option: s3_secure #5262

Open wdwinslow opened 1 month ago

wdwinslow commented 1 month ago

Describe the feature you'd like

An additional storage option that used S3 for image / attachment storage like the existing s3 option does, with the addition of causing the application itself to pull images from S3 and serve them to clients directly would be hugely helpful.

An alternative way to explain this is that an option like this would cause BookStack to treat images, the way it treats attachments stored in S3 now.

Reference: Current Storage Options

Describe the benefits this would bring to existing BookStack users

Can the goal of this request already be achieved via other means?

Yes - The signed URL approach mentioned in #763 would be a potentially viable alternative. However, given the way BookStack already pulls attachments from S3, this approach might be easier to implement.

Have you searched for an existing open/closed issue?

How long have you been using BookStack?

Under 3 months

Additional context

I have been asked to deploy BookStack for an organization that requires a high level of security. The organization wishes to deploy this in containerized form as it does with it's other applications. We attempted to deploy the LinuxServer.io containers on Google Cloud Platform (Cloud Run) using an attached Cloud Storage volume with the storage option set to local_secure. We ran into the exact same errors mentioned in #4226. We expect this is caused by the way the mounted object storage appears to the container. Thanks for your consideration.