Enterprise
NetBox Enterprise Storage Installation
Configure S3-compatible storage during NetBox Enterprise installation. For existing installations, see Storage Migration. For storage providers and CORS setup, see Storage Options.
Installation Configuration
When prompted for File Storage configuration during installation:
- Select External S3-Compatible Storage
- Provide the following details:
| Field | Description | Example |
|---|---|---|
| S3 Endpoint | S3 service endpoint URL | s3.amazonaws.com (AWS) |
nyc3.digitaloceanspaces.com (DO) | ||
minio.example.com (MinIO) | ||
| S3 Bucket Name | Name of your S3 bucket | netbox-enterprise-media |
| S3 Region | Storage region | us-east-1 (AWS) |
nyc3 (DigitalOcean) | ||
| Access Key ID | S3 access key | AKIAIOSFODNN7EXAMPLE |
| Secret Access Key | S3 secret key | wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY |
Advanced Options
Additional S3 configuration options (if needed):
| Option | Description | When to Use |
|---|---|---|
| Custom Endpoint URL | Override default endpoint | Self-hosted S3 (MinIO, Ceph) |
| Path Style Access | Use path-style URLs instead of virtual-hosted | Older S3 implementations |
| SSL Verification | Verify SSL certificates | Disable for self-signed certs (not recommended) |
| Custom ACL | Set object ACL | Customize object permissions |
TLS options
For S3 endpoints served over TLS, the following options control certificate handling:
| Option | Description | When to Use |
|---|---|---|
| S3 Skip TLS Verification | Connect over TLS even when the certificate is invalid (expired, or self-signed without a custom CA upload). | Self-signed endpoints during testing (not recommended for production) |
| S3 CA Certificate File | Custom CA certificate for connecting to the S3 server. | Self-signed certificates |
| S3 Client Certificate File | Client-side (mTLS) certificate. | The S3 server requires mutual TLS |
| S3 Client Key File | Client-side (mTLS) key. | The S3 server requires mutual TLS |
Testing S3 Configuration
After configuration, NetBox Enterprise will test S3 connectivity:
- Upload Test: Attempts to write a test file to S3
- Read Test: Attempts to read the test file back
- Delete Test: Removes the test file
- CORS Test: Verifies browser access (performed post-deployment)
If tests fail, review your S3 credentials, bucket permissions, and network connectivity. See Storage Options - Troubleshooting for details.