chore: audio backups now live in MinIO

The app key carries a second policy covering only the audio-backups bucket,
so the already-mounted credentials serve both. Verified on the live stack:
storage=object, key recordings/<user>/<stamp>, round trip byte-identical,
and the object is removed with its row.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
Daniel 2026-09-10 17:18:59 +02:00
parent f89dc01729
commit 2200587b40

View file

@ -26,6 +26,14 @@ services:
GENERATED_IMAGES_S3_BUCKET: generated-images
GENERATED_IMAGES_S3_ACCESS_KEY_FILE: /run/secrets/generated-images-access-key
GENERATED_IMAGES_S3_SECRET_KEY_FILE: /run/secrets/generated-images-secret-key
# Recordings are kept for 24 hours; the same MinIO, its own bucket. The
# app key carries a second policy covering only audio-backups, so these
# can reuse the mounted credentials (see scripts/enable-audio-backup-bucket.js).
AUDIO_BACKUPS_S3_ENDPOINT: http://assets:9000
AUDIO_BACKUPS_S3_REGION: us-east-1
AUDIO_BACKUPS_S3_BUCKET: audio-backups
AUDIO_BACKUPS_S3_ACCESS_KEY_FILE: /run/secrets/generated-images-access-key
AUDIO_BACKUPS_S3_SECRET_KEY_FILE: /run/secrets/generated-images-secret-key
volumes:
- scribe-logs:/app/data/logs
- clinical-assistant-mcp-data:/app/mcp-data:ro