Migrate Manyangles object storage to DigitalOcean Spaces

compose.coolify.yml

@@ -6,13 +6,13 @@ x-environment: &environment
   NEXT_PUBLIC_APP_URL: ${SERVICE_URL_WEB}
   BETTER_AUTH_URL: ${SERVICE_URL_WEB}
   BETTER_AUTH_SECRET: ${SERVICE_PASSWORD_64_AUTH}
-  S3_ENDPOINT: http://garage:3900
-  S3_PUBLIC_ENDPOINT: ${SERVICE_URL_GARAGE}
-  S3_REGION: garage
-  S3_BUCKET: manyangles
-  S3_ACCESS_KEY: GK${SERVICE_HEX_24_S3KEY}
-  S3_SECRET_KEY: ${SERVICE_HEX_64_S3SECRET}
-  S3_FORCE_PATH_STYLE: "true"
+  S3_ENDPOINT: https://nyc3.digitaloceanspaces.com
+  S3_PUBLIC_ENDPOINT: https://nyc3.digitaloceanspaces.com
+  S3_REGION: nyc3
+  S3_BUCKET: hltma
+  S3_ACCESS_KEY: ${SPACES_ACCESS_KEY:?Set Spaces access key}
+  S3_SECRET_KEY: ${SPACES_SECRET_KEY:?Set Spaces secret key}
+  S3_FORCE_PATH_STYLE: "false"
   EMAIL_PROVIDER: resend
   EMAIL_FROM: ${EMAIL_FROM}
   RESEND_API_KEY: ${RESEND_API_KEY}
@@ -67,7 +67,15 @@ services:
   storage-init:
     build: {context: ., target: worker}
     command: ["bun", "packages/storage/src/configure.ts"]
-    environment: *environment
+    # Keep the previous store available for rollback. Spaces CORS/lifecycle
+    # are managed separately; its scoped object key cannot change bucket rules.
+    environment:
+      NEXT_PUBLIC_APP_URL: ${SERVICE_URL_WEB}
+      S3_ENDPOINT: http://garage:3900
+      S3_REGION: garage
+      S3_BUCKET: manyangles
+      S3_ACCESS_KEY: GK${SERVICE_HEX_24_S3KEY}
+      S3_SECRET_KEY: ${SERVICE_HEX_64_S3SECRET}
     restart: "no"
     depends_on:
       garage: {condition: service_healthy}