MinIO no longer publishes images on Docker Hub and has been
trimming its community edition. RustFS is Apache 2.0 and exposes
the same S3 API, so the switch only touches the compose stack, the
dev configuration and the CI storage service. The bucket is now
created with the aws cli instead of mc. RustFS runs as a non-root
user, so the CI service runs as root to write to the runner's
/data/media.
robots.txt blocked all crawling, so crawlers could never fetch the
pages and never saw the noindex meta tag: URLs discovered through
external links could still end up listed in search results.
Allow crawling in robots.txt and add a X-Robots-Tag noindex header on
frontend pages and media files so every response carries the directive.
The cookies set by keycloak were not formatted correctly so the browser was
not taking them into account. Providing those additionnal directives fixes the
issue.
Before:
Set-Cookie: KEYCLOAK_SESSION=<T>; Version=1; Path=/;
SameSite=Laxrealms/drive/; Max-Age=36000; Secure; SameSite=None
After:
Set-Cookie: KEYCLOAK_SESSION=<T>; Version=1; Path=/realms/drive/;
SameSite=Lax; Max-Age=36000; Secure; SameSite=None
We want to add documentation showing how to use DS_Proxy with Drive.
With proxy is fully optionnal and is here if you want to an encryption
layer between Drive and the object storage.
We want to distinguish the url and the url_preview. The url_preview
property will be provided only if the mimetype is listed in the
ITEM_PREVIEWABLE_MIME_TYPES settings. Also an other route is added to
nginx forcing the content-disposition with the value attachment for
download url.