Storage

• Larger user files such as pictures (e.g. profile pictures) can be stored in the userFilesBucket.

• Backblaze is the provider, which supports the S3 api, at a fraction of the cost of AWS.

• Ensure that bucket is private, and encryption is enabled.

• Set up CORS rules to allow only localhost (for development) and the app domain (for production) as origins.

  • Use the CLI to apply the CORS rule: b2 bucket update --corsRules "$(<./s3-cors-rules.json)" quickstart-user-files allPrivate

  • Also update the CORS rules in the Backblaze UI accordingly (just in case it defaults to no origins allowed).