From 2200587b40f077d90349a5ecf5527e48c789fd21 Mon Sep 17 00:00:00 2001 From: Daniel Date: Thu, 10 Sep 2026 17:18:59 +0200 Subject: [PATCH] chore: audio backups now live in MinIO The app key carries a second policy covering only the audio-backups bucket, so the already-mounted credentials serve both. Verified on the live stack: storage=object, key recordings//, round trip byte-identical, and the object is removed with its row. Co-Authored-By: Claude Opus 5 --- docker-compose.yml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/docker-compose.yml b/docker-compose.yml index 2f729afb..84b263a4 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -26,6 +26,14 @@ services: GENERATED_IMAGES_S3_BUCKET: generated-images GENERATED_IMAGES_S3_ACCESS_KEY_FILE: /run/secrets/generated-images-access-key GENERATED_IMAGES_S3_SECRET_KEY_FILE: /run/secrets/generated-images-secret-key + # Recordings are kept for 24 hours; the same MinIO, its own bucket. The + # app key carries a second policy covering only audio-backups, so these + # can reuse the mounted credentials (see scripts/enable-audio-backup-bucket.js). + AUDIO_BACKUPS_S3_ENDPOINT: http://assets:9000 + AUDIO_BACKUPS_S3_REGION: us-east-1 + AUDIO_BACKUPS_S3_BUCKET: audio-backups + AUDIO_BACKUPS_S3_ACCESS_KEY_FILE: /run/secrets/generated-images-access-key + AUDIO_BACKUPS_S3_SECRET_KEY_FILE: /run/secrets/generated-images-secret-key volumes: - scribe-logs:/app/data/logs - clinical-assistant-mcp-data:/app/mcp-data:ro