Common questions

An index, not an FAQ: each question links straight to the page that answers it properly.

Deployment#

• Can I put it behind an AWS ALB?
• Does it need two ports, one for S3 and one for the UI?
• Does it work on Fly / Railway / Coolify / bare metal?
• Does it need S3, or can it use local disk?
• Does it work with Backblaze B2 / Hetzner / Wasabi / R2 / MinIO?
• Does it replace S3 or proxy to it?

Compression#

• Can I turn off compression for a specific bucket?
• Can I enable compression only for specific prefixes inside a bucket?
• What file types actually benefit from delta compression?
• Why doesn't my .tar.gz compress — and can compressed archives delta well at all?
• Does compression slow things down?

Authentication#

• Do OAuth and IAM work together?
• Can I disable auth entirely for dev?
• What if I lose the bootstrap password?
• Can I manage IAM entirely in YAML (GitOps)?

Encryption#

• Which backend encryption mode should I pick?
• Does enabling encryption re-encrypt my existing objects?
• Can I use cheap or untrusted S3-compatible storage safely?
• Can I use different keys for different buckets?
• What happens if I lose my proxy-AES key?
• How do I rotate a proxy-AES key?
• Does compression still work with encryption enabled?
• Does encryption apply to object metadata too?
• Does encryption add latency?
• I see dg-encrypted-native: sse-kms in my object metadata — is that leaking something?
• Can I write objects with the Python DeltaGlider CLI while the backend is encrypted?

Backup#

• What does "Full Backup" include?
• Is Full Backup the same as config sync (DGP_CONFIG_SYNC_BUCKET)?

Limits#

• What's the max object size?
• What's the max concurrent users?
• How long can presigned URLs live?