feat: update compose and readme

.env.example

@@ -29,6 +29,7 @@ S3_SECRET_ACCESS_KEY=
 S3_FORCE_PATH_STYLE=
 NEXT_PUBLIC_STORAGE_URL=
 NEXT_PUBLIC_AVATAR_BUCKET_NAME=
+NEXT_PUBLIC_ATTACHMENTS_BUCKET_NAME=
 NEXT_PUBLIC_STORAGE_DOMAIN=
 
 # Auth config (optional)

README.md

@@ -170,6 +170,7 @@ pnpm dev
 | `NEXT_PUBLIC_STORAGE_URL`                 | Storage service URL                                      | For file uploads         | `https://storage.kanbn.com`                                 |
 | `NEXT_PUBLIC_STORAGE_DOMAIN`              | Storage domain name                                      | For file uploads         | `kanbn.com`                                                 |
 | `NEXT_PUBLIC_AVATAR_BUCKET_NAME`          | S3 bucket name for avatars                               | For file uploads         | `avatars`                                                   |
+| `NEXT_PUBLIC_ATTATCHMENTS_BUCKET_NAME`    | S3 bucket name for attatchments                          | For file uploads         | `attatchments`                                              |
 | `NEXT_PUBLIC_ALLOW_CREDENTIALS`           | Allow email & password login                             | For authentication       | `true`                                                      |
 | `NEXT_PUBLIC_DISABLE_SIGN_UP`             | Disable sign up                                          | For authentication       | `false`                                                     |
 | `NEXT_PUBLIC_WHITE_LABEL_HIDE_POWERED_BY` | Hide “Powered by kan.bn” on public boards (self-host)    | For white labelling      | `true`                                                      |

cloud/docker-compose.yml

@@ -46,6 +46,7 @@ services:
       - S3_FORCE_PATH_STYLE=${S3_FORCE_PATH_STYLE}
       - NEXT_PUBLIC_STORAGE_URL=${NEXT_PUBLIC_STORAGE_URL}
       - NEXT_PUBLIC_AVATAR_BUCKET_NAME=${NEXT_PUBLIC_AVATAR_BUCKET_NAME}
+      - NEXT_PUBLIC_ATTACHMENTS_BUCKET_NAME=${NEXT_PUBLIC_ATTACHMENTS_BUCKET_NAME}
       - NEXT_PUBLIC_STORAGE_DOMAIN=${NEXT_PUBLIC_STORAGE_DOMAIN}
 
       # Auth config

docker-compose.yml

@@ -36,6 +36,7 @@ services:
       - S3_FORCE_PATH_STYLE=${S3_FORCE_PATH_STYLE}
       - NEXT_PUBLIC_STORAGE_URL=${NEXT_PUBLIC_STORAGE_URL}
       - NEXT_PUBLIC_AVATAR_BUCKET_NAME=${NEXT_PUBLIC_AVATAR_BUCKET_NAME}
+      - NEXT_PUBLIC_ATTACHMENTS_BUCKET_NAME=${NEXT_PUBLIC_ATTACHMENTS_BUCKET_NAME}
       - NEXT_PUBLIC_STORAGE_DOMAIN=${NEXT_PUBLIC_STORAGE_DOMAIN}
 
       # White label

packages/api/src/routers/attachment.ts

@@ -9,7 +9,7 @@ import { generateUID } from "@kan/shared/utils";
 
 import { createTRPCRouter, protectedProcedure } from "../trpc";
 import { assertUserInWorkspace } from "../utils/auth";
-import { generateDownloadUrl, generateUploadUrl } from "../utils/s3";
+import { generateUploadUrl } from "../utils/s3";
 
 export const attachmentRouter = createTRPCRouter({
   generateUploadUrl: protectedProcedure
@@ -78,7 +78,6 @@ export const attachmentRouter = createTRPCRouter({
         .replace(/[^a-zA-Z0-9._-]/g, "_")
         .substring(0, 200);
 
-      // Generate S3 key: {workspacePublicId}/{cardPublicId}/{generateUID()}-{sanitizedFilename}
       const s3Key = `${workspace.publicId}/${input.cardPublicId}/${generateUID()}-${sanitizedFilename}`;
 
       const url = await generateUploadUrl(
@@ -153,58 +152,6 @@ export const attachmentRouter = createTRPCRouter({
 
       return attachment;
     }),
-  getUrl: protectedProcedure
-    .meta({
-      openapi: {
-        summary: "Get presigned URL for attachment download",
-        method: "GET",
-        path: "/attachments/{attachmentPublicId}/url",
-        description: "Generates a presigned URL for downloading an attachment",
-        tags: ["Attachments"],
-        protect: true,
-      },
-    })
-    .input(z.object({ attachmentPublicId: z.string().min(12) }))
-    .output(z.object({ url: z.string(), filename: z.string() }))
-    .query(async ({ ctx, input }) => {
-      const userId = ctx.user?.id;
-
-      if (!userId)
-        throw new TRPCError({
-          message: `User not authenticated`,
-          code: "UNAUTHORIZED",
-        });
-
-      const attachment = await cardAttachmentRepo.getByPublicId(
-        ctx.db,
-        input.attachmentPublicId,
-      );
-
-      if (!attachment || attachment.deletedAt)
-        throw new TRPCError({
-          message: `Attachment with public ID ${input.attachmentPublicId} not found`,
-          code: "NOT_FOUND",
-        });
-
-      const workspaceId = attachment.card.list.board.workspaceId;
-
-      await assertUserInWorkspace(ctx.db, userId, workspaceId);
-
-      const bucket = process.env.NEXT_PUBLIC_ATTACHMENTS_BUCKET_NAME;
-      if (!bucket)
-        throw new TRPCError({
-          message: `Attachments bucket not configured`,
-          code: "INTERNAL_SERVER_ERROR",
-        });
-
-      const url = await generateDownloadUrl(
-        bucket,
-        attachment.s3Key,
-        86400, // 24 hours expiration
-      );
-
-      return { url, filename: attachment.originalFilename };
-    }),
   delete: protectedProcedure
     .meta({
       openapi: {

turbo.json

@@ -108,6 +108,7 @@
     "NEXT_PUBLIC_STORAGE_DOMAIN",
     "NEXT_PUBLIC_STORAGE_URL",
     "NEXT_PUBLIC_AVATAR_BUCKET_NAME",
+    "NEXT_PUBLIC_ATTACHMENTS_BUCKET_NAME",
     "NEXT_PUBLIC_ALLOW_CREDENTIALS",
     "NEXT_PUBLIC_DISABLE_SIGN_UP",
     "NEXT_PUBLIC_USE_STANDALONE_OUTPUT",