Guide · Site settings
Storage & email
Media storage (Cloudflare R2) and outgoing email (Amazon SES).
For: adminsPage 53 of 71
Overview
Keys are encrypted at rest and never shown again; leave a secret field empty to keep the stored value.
- Media storage (Cloudflare R2): account ID, bucket, an access key ID and secret scoped to that bucket, an optional public media URL (a custom domain for large files) and an optional API endpoint for EU/FedRAMP buckets. A one-time tool moves existing media from S3 to R2.
- Email: choose one provider (SMTP, Mailgun or Amazon SES; there is no automatic failover), the sender name and address and an optional reply-to. SMTP needs host, port (587 STARTTLS, 465 TLS), encryption and credentials; Mailgun a sending domain, region and API key; SES a region and either the server's AWS credentials or access keys stored here. Send a test before relying on it.
Email is needed for sign-up verification, password resets and demo invitations.
Where to find it
This page of the admin: /admin/storage. Only admins (and read-only demo accounts) can open it.
Settings on this page
What each setting does and its default. Defaults only: the manual never shows the values saved on a site.
Media storage (Cloudflare R2)
| Setting | What it does | Default |
|---|---|---|
| Account ID | Cloudflare dashboard → R2 → Account details (32 characters). | — |
| Bucket / Access key ID / Secret access key | An R2 API token scoped to this bucket (Object Read & Write). Leave the secret empty to keep it. | — |
| Public media URL (optional) | A custom domain connected to the bucket; empty serves everything through the site. | — |
| API endpoint override (optional) | Only for an EU/FedRAMP jurisdiction bucket. | — |
| Setting | What it does | Default |
|---|---|---|
| Email provider | SMTP, Mailgun or Amazon SES. Only the selected provider sends; the others' settings are kept; no automatic failover. | — |
| Sender name / Sender email / Reply-to address | — | — |
| SMTP: Host / Port / Encryption / Username / Password | 587 with STARTTLS or 465 with TLS from the start. | — |
| Mailgun: Sending domain / API region / API key | The verified domain (e.g. mg.example.com), US or EU region, and a sending key for that domain. | — |
| Amazon SES: AWS region / Authentication | Where the identity is verified; the server's AWS credentials (role / environment) or access keys stored here (limited to ses:SendEmail). | — |
| Access key ID / Secret access key / Session token | Only with stored access keys; the session token only for temporary credentials. | — |
| Send the test to | Sends a test message with the saved settings to this address. | — |