Storage Providers

In the AWS Console, go to S3 → Create bucket.

• Bucket name: nebutra-uploads (or your preferred name)
• Region: choose the region closest to your application
• Block public access: keep all public access blocked unless you need a public CDN
• Versioning: optional, recommended for production

Go to IAM → Users → Create user. Attach an inline policy:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:PutObject",
        "s3:GetObject",
        "s3:DeleteObject",
        "s3:ListBucket"
      ],
      "Resource": [
        "arn:aws:s3:::nebutra-uploads",
        "arn:aws:s3:::nebutra-uploads/*"
      ]
    }
  ]
}

Generate access keys for the user and save them as AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY.

In the S3 bucket settings, go to Permissions → CORS configuration and add:

[
  {
    "AllowedHeaders": ["*"],
    "AllowedMethods": ["GET", "PUT", "POST", "DELETE", "HEAD"],
    "AllowedOrigins": ["https://app.nebutra.com"],
    "ExposeHeaders": ["ETag"],
    "MaxAgeSeconds": 3600
  }
]

Replace AllowedOrigins with your application's domain. For local development, add http://localhost:3000.

Add the four variables to your Vercel project (or .env.local for local development) and redeploy.

In the Cloudflare dashboard, go to R2 → Create bucket.

• Bucket name: nebutra-uploads
• Location: Auto (or choose a specific region)

Go to R2 → Manage R2 API tokens → Create API token.

• Permissions: Object Read & Write
• Bucket: restrict to nebutra-uploads

Save the Access Key ID and Secret Access Key.

In R2 bucket settings, go to Settings → CORS Policy:

[
  {
    "AllowedOrigins": ["https://app.nebutra.com"],
    "AllowedMethods": ["GET", "PUT", "HEAD", "DELETE"],
    "AllowedHeaders": ["*"],
    "ExposeHeaders": ["ETag"],
    "MaxAgeSeconds": 3600
  }
]

If you need a public CDN URL for assets (avatars, public documents), go to R2 bucket → Settings → Public access and connect a custom domain or enable the r2.dev subdomain. Set R2_PUBLIC_URL to this URL.

Add all five variables to Vercel and redeploy. Your R2_ACCOUNT_ID is visible on the Cloudflare dashboard home page.

In the Backblaze dashboard, go to B2 Cloud Storage → Create a Bucket. Note the Endpoint URL shown after creation (e.g. s3.us-east-005.backblazeb2.com).

Go to App Keys → Add a New Application Key. Restrict it to your bucket and save the keyID and applicationKey.

Open the MinIO console at http://localhost:9001. Create a bucket named nebutra-uploads and generate an access key pair.