Attachments S3 backend

[gris-gris]

It would be great to see attachment integration with S3 as a backend, because it's more reliable and manageble for K8S installations - without using PVCs for pods w/ VaultWarden

[andbuitra]

+1 on this.

It would hep to manage stateless Vaultwarden deployments. Bookstack allows this and deployment in Kubernetes is ridiculously easy as you usually already have a DBMS and an object storage service running (or use Amazon's S3). At least for my use case this would allow to re-enable attachments

[vmax]

Implementation could possibly make use of object_store crate which provides a unified interface to major object storages.

[BlackDex]

I would rather suggest to use https://github.com/awslabs/mountpoint-s3 or https://github.com/s3fs-fuse/s3fs-fuse
That would make all your storage to be able to be stored in a s3 bucket if you want, though probably not a good idea for the icon cache or a sqlite database.

[xoxys]

While this technically might be possible, it's not really a good solution for Kubernetes, as it requires an extra layer through a CSI. I would recommend to look into a native S3 support.

[boskh99]

This is not working with https://github.com/awslabs/mountpoint-s3 as last one has very weak POSIX compatibility
Simple example from my trial:

root@vaultwarden-0:/data/attachments# echo 123 > 123
root@vaultwarden-0:/data/attachments# echo 456 >> 123
bash: 123: Operation not permitted

And VW got and error as well, when try to write attachment

│         status: Temporary,                                                                                                                                                              │
│         operation: "write",                                                                                                                                                             │
│         context: [                                                                                                                                                                      │
│             (                                                                                                                                                                           │
│                 "service",                                                                                                                                                              │
│                 "fs",                                                                                                                                                                   │
│             ),                                                                                                                                                                          │
│             (                                                                                                                                                                           │
│                 "path",                                                                                                                                                                 │
│                 "5ee6f8fd-82e8-4371-8214-ca9a509a8f19/29abd3164dbf5a5553e8",                                                                                                            │
│             ),                                                                                                                                                                          │
│             (                                                                                                                                                                           │
│                 "written",                                                                                                                                                              │
│                 "403153",                                                                                                                                                               │
│             ),                                                                                                                                                                          │
│         ],                                                                                                                                                                              │
│         source: Some(                                                                                                                                                                   │
│             Os {                                                                                                                                                                        │
│                 code: 116,                                                                                                                                                              │
│                 kind: StaleNetworkFileHandle,                                                                                                                                           │
│                 message: "Stale file handle",                                                                                                                                           │
│             },                                                                                                                                                                          │
│         ),                                                                                                                                                                              │
│     },

[DrissiReda]

Has this been abandoned? I also need it for kubernetes HA

[BlackDex]

You can build Vaultwarden your self with the s3 feature enabled, which should provide this.

Also, be aware that Vaultwarden does not support HA. Mainly the websocket/push part is not HA aware.