JP 181ef13c7e Make the image bucket private ...

The bucket carried an anonymous download policy, which is what made the
old unauthenticated proxy work. Now that images are served through a
session-gated route using credentials, anonymous access is unnecessary
and was the second half of the public exposure.

Applied on the running host; both compose files updated so bringing the
stack up elsewhere does not re-apply 'download'.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-08 20:31:01 +00:00

2.2 KiB

Raw Blame History

View Raw