From dd029c8819b68df35685bb70346c995e0a6f7bc1 Mon Sep 17 00:00:00 2001 From: sam Date: Thu, 10 Sep 2026 07:18:37 +1000 Subject: [PATCH] fix: minio-go must sign with Garage region ('garage', not AWS us-east-1) --- app/src/media.go | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/app/src/media.go b/app/src/media.go index cf8954e..356a8dd 100644 --- a/app/src/media.go +++ b/app/src/media.go @@ -47,7 +47,8 @@ func NewMediaClient() *MediaClient { } else if strings.HasPrefix(addr, "https://") { addr = strings.TrimPrefix(addr, "https://") } - cl, err := minio.New(addr, mc.Key, mc.Secret, secure) + // Garage region is "garage" (not AWS us-east-1) — critical for SigV4 scope. + cl, err := minio.NewWithRegion(addr, mc.Key, mc.Secret, secure, "garage") if err != nil { mc.Err = err } else { @@ -80,6 +81,7 @@ func (c *MediaClient) Get(name string, w http.ResponseWriter) bool { } data, derr := io.ReadAll(obj) if derr != nil { + log.Printf("media read %s: %v", name, derr) http.Error(w, "media read error", http.StatusBadGateway) return false }