Bring Your Own S3 Storage to Self-Hosted InsForge
Self-hosted InsForge can now use any S3-compatible service as its storage backend. Connect AWS S3, Cloudflare R2, Wasabi, Tencent COS, Aliyun OSS, or an existing MinIO, RustFS, Garage, or Ceph deployment by setting the new S3_* environment variables.
Prefer to keep everything on one host? InsForge now includes Docker Compose overlays for MinIO and RustFS. Each overlay starts the storage service, creates the backing bucket, and keeps it on the private Docker network:
# MinIO
docker compose -f docker-compose.prod.yml -f docker-compose.minio.yml up -d
# RustFS
docker compose -f docker-compose.prod.yml -f docker-compose.rustfs.yml up -d
Private storage endpoints and providers without S3 POST policy support can use the new proxy mode, which streams uploads and downloads through the InsForge backend and supports ranged downloads for media seeking.
With an S3 backend connected, the S3 Configuration panel is available in the self-hosted dashboard. You can create access keys and use the InsForge S3-compatible gateway with tools including the AWS CLI, rclone, boto3, and Terraform.
Existing files are not migrated automatically when you switch from local storage to S3, so move them before changing the backend.
Read the self-hosted storage guide
Passwordless Login with Email OTPs
Your apps can now sign users in with a six-digit code sent to their email address—no password required.
Request a code from POST /api/auth/email/send-otp, then log in through POST /api/auth/sessions with the email, code, and method: "otp".
For a new email address, InsForge creates a verified passwordless user only after the code is confirmed. Existing users can sign in with the same flow. Codes expire after five minutes, work once, and are consumed after three failed attempts. The code-request endpoint also returns the same response for known and unknown emails to prevent account discovery.
The new Email OTP Sign-In template is available with the other authentication email templates in the dashboard, so you can customize the subject and HTML for your app. Self-hosted instances need Custom SMTP configured to deliver sign-in codes.
Read the Email OTP REST API guide
Both features are available in InsForge v2.2.9.

