Architecture
How OpenBucket fits together — one Node process running NestJS, MikroORM/libsql, the local filesystem, and an Angular admin console.
Security model
How OpenBucket authenticates and authorizes every request — SigV4 for S3, admin JWTs over argon2id, scoped keys, bucket-policy evaluation, and secret handling.
Durability
How OpenBucket keeps your bytes correct — atomic writes, stored SHA-256 integrity gates, background scrubbing, replication, tiering, and backups.
Storage layout
Exactly what OpenBucket writes into DATA_DIR — the SQLite metadata DB, the blob tree, the key-to-path encoding, and the tmp/trash/multipart working dirs.
Security audit (2026)
Summary of the July 2026 white-box security audit of OpenBucket — 22 findings across 13 attack surfaces, all remediated and shipped, each with a regression test.