create-mercato-app 0.6.3-develop.3578.1.37cbb8f92c → 0.6.3-develop.3586.1.d5a44c810f

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-mercato-app",
-  "version": "0.6.3-develop.3578.1.37cbb8f92c",
+  "version": "0.6.3-develop.3586.1.d5a44c810f",
   "type": "module",
   "description": "Create a new Open Mercato application",
   "main": "./dist/index.js",

package/template/.env.example

@@ -55,6 +55,13 @@ OM_ENABLE_ENTERPRISE_MODULES_SSO=false
 # Requires OM_ENABLE_ENTERPRISE_MODULES=true
 OM_ENABLE_ENTERPRISE_MODULES_SECURITY=false
 
+# Enable the S3-compatible storage provider module (default: false).
+# When true, `storage_s3` is added to enabledModules in modules.ts and the
+# Integration Marketplace exposes the "S3 Object Storage" card.
+# The provider can also be preconfigured from env vars — see the
+# "S3 Storage Preconfiguration" block at the bottom of this file.
+OM_ENABLE_STORAGE_S3=false
+
 # OM_SECURITY_MFA_SETUP_SECRET=change-me-mfa-setup-secret
 OM_SECURITY_TOTP_ISSUER=Open Mercato
 OM_SECURITY_TOTP_WINDOW=1
@@ -451,6 +458,52 @@ OCR_MODEL=gpt-4o
 # OM_INTEGRATION_AKENEO_CATEGORIES_SETTINGS_JSON=
 # OM_INTEGRATION_AKENEO_ATTRIBUTES_SETTINGS_JSON=
 
+# ============================================================================
+# S3 Storage Preconfiguration
+# ============================================================================
+# If these credentials are set, the storage_s3 provider preconfigures itself
+# during tenant setup and can be rerun later (for existing tenants) with:
+# yarn mercato storage_s3 configure-from-env --tenant <tenantId> --org <organizationId>
+#
+# For unattended deploys (Dokploy, Coolify, Kamal, etc.), use --all-tenants
+# as a post-deploy hook to apply the preset to every active organization
+# without tracking UUIDs in your deploy config:
+# yarn mercato storage_s3 configure-from-env --all-tenants
+#
+# The CLI exits non-zero on an incomplete preset so CI/automation can detect
+# misconfiguration. Pass --force (or set OM_INTEGRATION_STORAGE_S3_FORCE_PRECONFIGURE=true)
+# to overwrite credentials that have already been stored for the tenant.
+#
+# The module itself is only loaded when OM_ENABLE_STORAGE_S3=true (see above)
+# — without that flag the preconfiguration block below is ignored.
+#
+# Required for auto-preconfiguration:
+# OM_INTEGRATION_STORAGE_S3_ACCESS_KEY_ID=AKIAIOSFODNN7EXAMPLE
+# OM_INTEGRATION_STORAGE_S3_SECRET_ACCESS_KEY=wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
+# OM_INTEGRATION_STORAGE_S3_REGION=eu-central-1
+# OM_INTEGRATION_STORAGE_S3_BUCKET=my-mercato-attachments
+#
+# Optional behavior:
+# OM_INTEGRATION_STORAGE_S3_SESSION_TOKEN=
+# OM_INTEGRATION_STORAGE_S3_ENDPOINT=https://fra1.digitaloceanspaces.com
+# OM_INTEGRATION_STORAGE_S3_FORCE_PATH_STYLE=false
+# OM_INTEGRATION_STORAGE_S3_FORCE_PRECONFIGURE=false
+#
+# Notes:
+# - SESSION_TOKEN is only needed for short-lived STS credentials.
+# - Leave ENDPOINT blank for AWS S3. Set it for MinIO, DigitalOcean Spaces,
+#   Cloudflare R2, Backblaze B2, etc.
+# - FORCE_PATH_STYLE must be true for MinIO and most self-hosted S3 services.
+# - Leave the block commented out when S3 should not be preconfigured.
+# OM_INTEGRATION_STORAGE_S3_ACCESS_KEY_ID=
+# OM_INTEGRATION_STORAGE_S3_SECRET_ACCESS_KEY=
+# OM_INTEGRATION_STORAGE_S3_REGION=
+# OM_INTEGRATION_STORAGE_S3_BUCKET=
+# OM_INTEGRATION_STORAGE_S3_SESSION_TOKEN=
+# OM_INTEGRATION_STORAGE_S3_ENDPOINT=
+# OM_INTEGRATION_STORAGE_S3_FORCE_PATH_STYLE=false
+# OM_INTEGRATION_STORAGE_S3_FORCE_PRECONFIGURE=false
+
 # ============================================================================
 # InboxOps Configuration (email-to-ERP agent)
 # ============================================================================