Console › Storage decides where claim evidence is kept:
- Off - each store connects its own Google Drive (as before).
- This server - files go to the hosting disk (folder
uploads/store, not reachable from the web). Simple, but hosting disk space is limited. - Cloudflare R2 / S3-compatible (recommended) - no download fees, lots of space. Create a private bucket and an API token with Object Read & Write, paste the endpoint, bucket, access key and secret, add the CORS rule shown, then Test storage.
Each store's files live in their own folder (t<store>/…). Links in claims open through file.php and, with R2, hand out a download link valid for 5 minutes each time. Plans can limit storage per store (Plans › storage MB) and you set the largest file allowed.
TipIf R2 does not accept the wildcard origin in the CORS rule, list your store addresses one by one. Without CORS, files still upload through your server, limited by the server's upload size.