Architecture
How OpenBucket fits together — one Node process running NestJS, MikroORM/libsql, the local filesystem, and an Angular admin console.
Security model
How OpenBucket authenticates and authorizes every request — SigV4 for S3, admin JWTs over argon2id, scoped keys, bucket-policy evaluation, and secret handling.
Durability
How OpenBucket keeps your bytes correct — atomic writes, stored SHA-256 integrity gates, background scrubbing, replication, tiering, and backups.
Storage layout
Exactly what OpenBucket writes into DATA_DIR — the SQLite metadata DB, the blob tree, the key-to-path encoding, and the tmp/trash/multipart working dirs.