summaryrefslogtreecommitdiff
path: root/genesishosting/backups/dr/assets-mastodon-bucket.md
blob: 6a36a1550cd1fdc1e0dff1bbc251332d06d26291 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
## 2025-05-02 22:24:25 – MinIO Bucket Access Configuration for Mastodon

**Bucket**: `assets-mastodon`
**Server**: `shredderv2`
**User**: `genesisuser`
**Permissions**: Read / Write / Delete
**Policy Name**: `assets-mastodon-rw-policy`

### Commands Executed:

```bash
mc alias set localminio http://localhost:9000 genesisadmin MutationXv3!

cat > assets_mastodon_rw_policy.json <<EOF
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "s3:GetBucketLocation",
        "s3:ListBucket"
      ],
      "Effect": "Allow",
      "Resource": "arn:aws:s3:::assets-mastodon"
    },
    {
      "Action": [
        "s3:PutObject",
        "s3:GetObject",
        "s3:DeleteObject"
      ],
      "Effect": "Allow",
      "Resource": "arn:aws:s3:::assets-mastodon/*"
    }
  ]
}
EOF

mc admin policy add localminio assets-mastodon-rw-policy assets_mastodon_rw_policy.json
mc admin policy set localminio assets-mastodon-rw-policy user=genesisuser
```

### Outcome:

User `genesisuser` now has full authenticated access to `assets-mastodon` on `shredderv2`'s MinIO.