Allow s3 credentials via env (#6066)

closes #5072

packages/twenty-server/src/engine/integrations/environment/environment-variables.ts

@@ -220,6 +220,16 @@ export class EnvironmentVariables {
   @IsOptional()
   STORAGE_S3_ENDPOINT: string;
 
+  @ValidateIf((env) => env.STORAGE_TYPE === StorageDriverType.S3)
+  @IsString()
+  @IsOptional()
+  STORAGE_S3_ACCESS_KEY_ID: string;
+
+  @ValidateIf((env) => env.STORAGE_TYPE === StorageDriverType.S3)
+  @IsString()
+  @IsOptional()
+  STORAGE_S3_SECRET_ACCESS_KEY: string;
+
   @IsString()
   @ValidateIf((env) => env.STORAGE_TYPE === StorageDriverType.Local)
   STORAGE_LOCAL_PATH = '.local-storage';

packages/twenty-server/src/engine/integrations/file-storage/file-storage.module-factory.ts

@@ -32,15 +32,24 @@ export const fileStorageModuleFactory = async (
       const bucketName = environmentService.get('STORAGE_S3_NAME');
       const endpoint = environmentService.get('STORAGE_S3_ENDPOINT');
       const region = environmentService.get('STORAGE_S3_REGION');
+      const accessKeyId = environmentService.get('STORAGE_S3_ACCESS_KEY_ID');
+      const secretAccessKey = environmentService.get(
+        'STORAGE_S3_SECRET_ACCESS_KEY',
+      );
 
       return {
         type: StorageDriverType.S3,
         options: {
           bucketName: bucketName ?? '',
           endpoint: endpoint,
-          credentials: fromNodeProviderChain({
+          credentials: accessKeyId
-            clientConfig: { region },
+            ? {
-          }),
+                accessKeyId,
+                secretAccessKey,
+              }
+            : fromNodeProviderChain({
+                clientConfig: { region },
+              }),
           forcePathStyle: true,
           region: region ?? '',
         },

packages/twenty-website/src/content/developers/self-hosting/self-hosting-var.mdx

@@ -142,6 +142,8 @@ yarn command:prod cron:calendar:google-calendar-sync
     ['STORAGE_S3_REGION', '', 'Storage Region'],
     ['STORAGE_S3_NAME', '', 'Bucket Name'],
     ['STORAGE_S3_ENDPOINT', '', 'Use if a different Endpoint is needed (for example Google)'],
+    ['STORAGE_S3_ACCESS_KEY_ID', '', 'Optional depending on the authentication method'],
+    ['STORAGE_S3_SECRET_ACCESS_KEY', '', 'Optional depending on the authentication method'],
     ['STORAGE_LOCAL_PATH', '.local-storage', 'data path (local storage)'],
     ]}></ArticleTable>