abw-react-starter 1.0.3 → 1.0.4

package/README.md

@@ -87,6 +87,7 @@ If enabled, the CLI will:
 
   * `plugins.ts`
   * `middlewares.ts`
+  * `server.ts`
 * Ask for:
 
   * Bucket name
@@ -96,6 +97,94 @@ If enabled, the CLI will:
 
 ---
 
+## ⚠️ S3 Bucket Configuration (IMPORTANT)
+
+For image uploads to work correctly, your S3 bucket **must allow public read access**.
+
+---
+
+### 1. Block Public Access
+
+Go to:
+
+S3 → Your Bucket → Permissions → Block public access
+
+Configure:
+
+* ❌ Do NOT block all public access
+* ✔ Allow public access (at least partially)
+
+If everything is blocked, images **will not load in the browser**.
+
+---
+
+### 2. Object Ownership (ACLs)
+
+Go to:
+
+S3 → Your Bucket → Permissions → Object Ownership
+
+Set:
+
+* ✔ ACLs enabled
+
+This is required because Strapi uploads files using:
+
+```js
+ACL: 'public-read'
+```
+
+---
+
+## 🔓 What this means
+
+* Uploaded images will be publicly accessible via URL:
+
+```
+https://your-bucket.s3.region.amazonaws.com/image.jpg
+```
+
+* Only your backend (using AWS credentials) can:
+
+  * upload
+  * delete
+  * modify files
+
+---
+
+## 🔐 Is this secure?
+
+Yes — this is standard practice for most web apps.
+
+As long as you:
+
+* ❌ do NOT expose your AWS credentials
+* ✔ use restricted IAM permissions
+
+your setup is safe.
+
+---
+
+## 🚀 Advanced (optional)
+
+For more advanced setups, you can later switch to:
+
+* CloudFront (CDN)
+* Private buckets + signed URLs
+* Bucket policies instead of ACLs
+
+---
+
+## 🧠 Summary
+
+| Setting                 | Value               |
+| ----------------------- | ------------------- |
+| Block Public Access     | ❌ Not fully blocked |
+| Object Ownership (ACLs) | ✔ Enabled           |
+| Upload ACL              | public-read         |
+
+---
+
 ## 🔐 Requirements
 
 Make sure you have installed:
@@ -129,8 +218,8 @@ npm run dev
 
 ```
 my-app/
-├── backend/     # Strapi API
-├── frontend/    # Next.js app
+├── backend/
+├── frontend/
 └── .abw-starter.json
 ```
 
@@ -164,6 +253,16 @@ The CLI will prompt you to login automatically.
 
 ---
 
+### Images not loading (S3)
+
+Check:
+
+* Bucket is not fully blocking public access
+* ACLs are enabled
+* Correct bucket name and region
+
+---
+
 ## 📄 License
 
 MIT

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "abw-react-starter",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "CLI para criar projetos Strapi + Next + Heroku",
   "bin": {
     "abw-react-starter": "./bin/create.js"