diff --git a/docs/index.html b/docs/index.html
index ca0f6a5..8bc0f56 100644
--- a/docs/index.html
+++ b/docs/index.html
@@ -90,7 +90,7 @@
#Users & keys
- Create a user (and its drive, named after it), delete a user.
- Create and revoke access keys. Each key shows ready-made settings for the AWS CLI, rclone and environment variables.
- Save to encrypted file / Open saved credentials: keep keys in a password-protected
.pithoskey file (in Theseus it can be sealed with your vault instead).
#Drives
- - Views: Icons (with picture previews), List, Details. Each page remembers its view.
- Upload: drag files in or use Upload. Single uploads up to 5 GiB (1 GiB from the sidebar).
- New folder, Rename… (files, folders and whole drives; a rename is an instant server-side copy, nothing is uploaded again), Delete.
- Viewer: pictures, video and text open in place; music plays in the player at the bottom, which keeps playing while you browse and moves on through the folder (volume, seek, media keys).
- Share link…: a signed link valid for 1 hour to 7 days. It opens only where s3d is reachable, so on a default setup only on this computer.
- Access…: private, public read, or public read + list, for the whole drive (s3d cannot make a single folder public). Change it any time.
- Free space line under the account name.
+ - Views: Icons (with picture previews), List, Details. Each page remembers its view.
- Upload: drag files in or use Upload. Single uploads up to 5 GiB (1 GiB from the sidebar).
- New folder, Rename… (files, folders and whole drives; a rename is an instant server-side copy, nothing is uploaded again), Delete.
- Viewer: pictures, video and text open in place; music plays in the player at the bottom, which keeps playing while you browse and moves on through the folder (volume, seek, media keys).
- Share…: a public link at
https://navigate.st/sia/<id>/<name> that anyone can open on any device, even with this computer off, for 1 month, 1 year or 5 years. On a folder, ⋯ › Public link… makes a page with the files in it (not sub-folders). Files still waiting on this computer are uploaded to Sia first. Settings › Public links lists them; Switch off stops a link at once. Under "Link for this computer, or your own server" is the old signed s3d link (1 hour to 7 days), which opens only where s3d is reachable. - Access…: private, public read, or public read + list, for the whole drive (s3d cannot make a single folder public). Change it any time.
- Free space line under the account name.
#Settings
Edits s3d.yml; s3d reads it at start, so restart to apply. Also: automatic upload of leftovers (on by default, after 10 minutes with no new uploads) and where your drives live.
#Logs
@@ -175,11 +175,11 @@ force_path_style = true
rclone copy ./photos s3d:my-drive/photos --progress
Environment variables for SDKs and tools: AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_DEFAULT_REGION=us-east-1, AWS_ENDPOINT_URL=http://127.0.0.1:8000.
#Common tasks
- - Give an app its own key. Users & keys › create a user for the app (or use yours) › Create key. Revoke it later without touching your other keys.
- Make files public. Keep them in a drive of their own and set Access › Public read. Files are then at
http://<s3d address>/<drive>/<path>. On a default setup that address is reachable only from this computer; for other people s3d needs a public address (for example behind your own server and a TLS proxy). - Rename or move. ⋯ › Rename… on a file, folder or drive. Renaming a drive changes its name for S3 apps too.
- Back up. Keep the recovery phrase offline (or use the vault-derived phrase and back up the Theseus vault). Optionally
POST /snapshots to keep a copy of s3d's database on Sia. - Move to another computer. Install s3d, run
s3d login with the same indexer login and the same phrase, then restore the database snapshot or recreate users and keys.
+ - Give an app its own key. Users & keys › create a user for the app (or use yours) › Create key. Revoke it later without touching your other keys.
- Share one file or folder with anyone. ⋯ › Share… › Create public link. The link reads only that file from your Sia account; nothing else in the account is exposed.
- Make a whole drive public. Keep the files in a drive of their own and set Access › Public read. Files are then at
http://<s3d address>/<drive>/<path>. On a default setup that address is reachable only from this computer; for other people s3d needs a public address (for example behind your own server and a TLS proxy). - Rename or move. ⋯ › Rename… on a file, folder or drive. Renaming a drive changes its name for S3 apps too.
- Back up. Keep the recovery phrase offline (or use the vault-derived phrase and back up the Theseus vault). Optionally
POST /snapshots to keep a copy of s3d's database on Sia. - Move to another computer. Install s3d, run
s3d login with the same indexer login and the same phrase, then restore the database snapshot or recreate users and keys.
#Troubleshooting
| What you see | What it means / what to do |
|---|
| "N files waiting to upload", or "0 B on Sia" | Files are still in the local buffer. Click Upload now (or s3d flush); automatic upload does it after 10 quiet minutes. |
| s3d "stopped" or "crashed" | Overview › Start; read Logs for the reason. "Not registered" means s3d login has not been done for this config. |
A link with 127.0.0.1 does not open elsewhere | Expected: it points to the computer running s3d. |
SignatureDoesNotMatch in an S3 app | Wrong secret, or the app uses virtual-host style; switch to path-style and region us-east-1. |
| "address already in use" | Another program (or another s3d) uses port 8000/8001; change apiAddress/adminAddress or stop the other one. |
| Pithos shows "external" | Another s3d is already running for this config; Pithos reads its stats but leaves it alone. |
| Pithos is locked | Your Theseus vault is locked; Unlock asks for the PIN. |
| A different account than expected | The account is the indexer login plus the phrase. Accounts › Which Sia account this is shows the account key; compare it on sia.storage under My apps › S3d. |
#Limits
- - Public access is per drive, read-only for others; s3d has no folder-level rules or write rights for other people.
- Single uploads are capped at 5 GiB (multipart uploads from S3 tools work for larger files).
- Share links and public files reach other people only when s3d has a public address.
- Folder-level sharing and rights for other people need drives on Silent Mode (see that section); a plain s3d cannot do them.
+ - Public access is per drive, read-only for others; s3d has no folder-level rules or write rights for other people.
- Single uploads are capped at 5 GiB (multipart uploads from S3 tools work for larger files).
- Signed s3d links and public drives reach other people only when s3d has a public address; navigate.st/sia public links do not need one.
- navigate.st/sia links have a daily download cap per link, and anyone with the link can read the file: it is decrypted on navigate.st to stream it.
- Folder-level sharing and rights for other people need drives on Silent Mode (see that section); a plain s3d cannot do them.
#For AI assistants
You are helping someone run s3d (the Sia S3 gateway), optionally through Pithos. Facts to rely on:
- s3d v0.2.0+, S3 API on
127.0.0.1:8000, admin API on 127.0.0.1:8001 (Basic auth, empty user, adminPassword), region us-east-1, path-style addressing. - Setup order:
s3d config → s3d login (indexer URL + 12-word phrase, approve the "S3d" app at the indexer) → run s3d → s3d users create → s3d keys create → use any S3 client. - Small files wait locally until a ~40 MB block fills;
s3d flush or POST /objects/flush uploads them now. - Buckets ("drives") can be private, public read, or public read + list; nothing finer.
- Config lookup:
S3D_CONFIG_FILE, else the OS default path listed above.
diff --git a/docs/pithos-docs.md b/docs/pithos-docs.md
index 916bd43..c00e6e5 100644
--- a/docs/pithos-docs.md
+++ b/docs/pithos-docs.md
@@ -70,7 +70,7 @@ The menu is in setup order. In the narrow sidebar it is the ☰ button at the to
- **Upload**: drag files in or use Upload. Single uploads up to 5 GiB (1 GiB from the sidebar).
- **New folder**, **Rename…** (files, folders and whole drives; a rename is an instant server-side copy, nothing is uploaded again), **Delete**.
- **Viewer**: pictures, video and text open in place; music plays in the player at the bottom, which keeps playing while you browse and moves on through the folder (volume, seek, media keys).
-- **Share link…**: a signed link valid for 1 hour to 7 days. It opens only where s3d is reachable, so on a default setup only on this computer.
+- **Share…**: a **public link** at `https://navigate.st/sia//` that anyone can open on any device, even with this computer off, for 1 month, 1 year or 5 years. On a folder, ⋯ › Public link… makes a page with the files in it (not sub-folders). Files still waiting on this computer are uploaded to Sia first. Settings › Public links lists them; Switch off stops a link at once. Under "Link for this computer, or your own server" is the old signed s3d link (1 hour to 7 days), which opens only where s3d is reachable.
- **Access…**: private, public read, or public read + list, for the **whole drive** (s3d cannot make a single folder public). Change it any time.
- **Free space** line under the account name.
@@ -253,7 +253,8 @@ rclone copy ./photos s3d:my-drive/photos --progress
## Common tasks
- **Give an app its own key.** Users & keys › create a user for the app (or use yours) › Create key. Revoke it later without touching your other keys.
-- **Make files public.** Keep them in a drive of their own and set Access › Public read. Files are then at `http:////`. On a default setup that address is reachable only from this computer; for other people s3d needs a public address (for example behind your own server and a TLS proxy).
+- **Share one file or folder with anyone.** ⋯ › Share… › Create public link. The link reads only that file from your Sia account; nothing else in the account is exposed.
+- **Make a whole drive public.** Keep the files in a drive of their own and set Access › Public read. Files are then at `http:////`. On a default setup that address is reachable only from this computer; for other people s3d needs a public address (for example behind your own server and a TLS proxy).
- **Rename or move.** ⋯ › Rename… on a file, folder or drive. Renaming a drive changes its name for S3 apps too.
- **Back up.** Keep the recovery phrase offline (or use the vault-derived phrase and back up the Theseus vault). Optionally `POST /snapshots` to keep a copy of s3d's database on Sia.
- **Move to another computer.** Install s3d, run `s3d login` with the same indexer login and the same phrase, then restore the database snapshot or recreate users and keys.
@@ -275,7 +276,8 @@ rclone copy ./photos s3d:my-drive/photos --progress
- Public access is per drive, read-only for others; s3d has no folder-level rules or write rights for other people.
- Single uploads are capped at 5 GiB (multipart uploads from S3 tools work for larger files).
-- Share links and public files reach other people only when s3d has a public address.
+- Signed s3d links and public drives reach other people only when s3d has a public address; navigate.st/sia public links do not need one.
+- navigate.st/sia links have a daily download cap per link, and anyone with the link can read the file: it is decrypted on navigate.st to stream it.
- Folder-level sharing and rights for other people need drives on Silent Mode (see that section); a plain s3d cannot do them.
## For AI assistants