@viseed/plugin-s3

Amazon S3 media storage provider for Viseed CMS.

Install the plugin, then configure the bucket and credentials in Admin > Media > Settings. All settings are stored (encrypted at rest) in the system database — nothing needs to be passed in code.

import { createCMS } from '@viseed/cms'
import { s3Plugin } from '@viseed/plugin-s3'

createCMS({ plugins: [s3Plugin()] })

Prerequisites

VISEED_ENCRYPTION_KEY

The plugin encrypts your S3 secretAccessKey with AES-256-GCM before saving it to the database. You must set this env var before starting the server — the CMS will refuse to save storage credentials without it.

Generate a key (pick one):

# OpenSSL (recommended — available on macOS, Linux, WSL, Git Bash)
openssl rand -base64 32

# Node / Bun
node -e "console.log(require('crypto').randomBytes(32).toString('base64'))"

Add the output to your .env:

VISEED_ENCRYPTION_KEY=<paste generated value here>

Important: treat this key like a password. If you lose it, any secretAccessKey already stored in the database cannot be decrypted and you will need to re-enter your S3 credentials. Never commit the real value to source control.