Assets & Storage Guide

Connect your own storage providers and secure your digital assets using the Aranly File Engine.

Introduction to Assets & Storage

The Assets & Storage dashboard is your central hub for managing how files are delivered to your customers. Instead of simply redirecting users to a public URL, Aranly allows you to "mask" your files and stream them directly from your own private storage, keeping your source links hidden and secure.

Why use Assets & Storage?

By connecting your S3 bucket or Google Drive, you can provide secure, time-limited download links. Customers receive your file, but they never see your private bucket URL or raw file paths.

Connecting Your Storage

Before you can use secured delivery, you must link a storage provider in the Connect Accounts section.

Google Drive

Ideal for small to medium files and easy management.

One-click OAuth connection
Supports personal and Shared Drives
Secure streaming via Google API

S3-Compatible

Enterprise storage for large files (AWS, R2, Wasabi).

Standard regional buckets
Path-Style and Virtual-Host support
Validated connection testing

Aranly Drive (Built-in)

High-performance, secure storage powered by Cloudflare R2 and D1.

Native Speed: Direct-to-browser streaming at the edge.
Bouncer Protection: Every byte is secured by AES-256-GCM tokens.
Large Files: Supports multipart chunking for assets up to 5GB.

🚀 Best for Production

Aranly Drive is our primary storage engine. It provides the highest security and reliability because it is tightly integrated into the Aranly architecture.

Delivery Modes Explained

Public Redirect

The "Classic" mode. When a user clicks your link, they are redirected directly to the URL you provided. The destination URL is visible in their browser address bar.

Unmasked

Secured Redirect (File Engine)

The Aranly File Engine proxies the file. The original URL is never shared with the user. Instead, we stream the file through a secure, time-limited token.

Securely Proxied

How to Link Files for Products

Once your accounts are connected, follow these steps to secure your product downloads in the Product Storage Settings table:

Set Delivery Mode

Change the dropdown from Public Redirect to Secured Redirect.

Select Your Platform

Choose your storage provider from the Platform dropdown to auto-populate the best settings:

AWS / DigitalOcean

Best for standard regional buckets. Uses Virtual-Host style by default.

Cloudflare R2

Requires auto region and account-level endpoints. Path-Style should be OFF.

Enter File Identifier

This is how the system finds your file:

Aranly Drive: Use the Object Key (the relative path) shown in your Drive Explorer.
Google Drive: Enter the File ID from the sharing URL (e.g., 1aBc...Xyz).
S3 / R2: Enter the Object Key (the full path within your bucket).

Save & Verify

Click the Save button. The system will perform an internal validation to make sure the row is properly configured.

Crucial Platform Tips

Cloudflare R2

When connecting R2, use your Account ID endpoint (found in the R2 dashboard). Set region to auto. Ensure Path-Style Access is OFF.

DigitalOcean Spaces

Use your data center region (e.g., nyc3, ams3). Your endpoint should follow the pattern: https://your-region.digitaloceanspaces.com.

What is Path-Style Access?

Legacy S3 providers (and local setups like MinIO) require the bucket name to be in the URL path (...com/my-bucket). Modern providers like AWS and R2 use subdomains (my-bucket.s3...com). Our toggle lets you handle both situations with one click.