From 9c9a4a75d8f41d188973ca9a252bd43a3fab7aac Mon Sep 17 00:00:00 2001
From: Stefan Hausotte <stefan.hausotte@gmx.de>
Date: Sat, 29 Aug 2026 16:16:06 +0200
Subject: [PATCH 1/2] docs: document the GCS storage backend

Kellnr 6.7 adds Google Cloud Storage alongside the local filesystem and S3.

- New "GCS Storage" config group with all nine [gcs] settings, their env
  variables and defaults, reachable from the jump navigation.
- Note that only one remote storage backend can be enabled at a time and that
  credentials come from Application Default Credentials.
- Add --gcs-enabled to the common CLI arguments table.
- Mention GCS buckets alongside S3 in the backup section.
- List Google Cloud Storage under the storage backends on the features page.
---
 src/views/DocumentationV6View.vue | 45 +++++++++++++++++++++++++++++--
 src/views/FeaturesView.vue        |  1 +
 2 files changed, 44 insertions(+), 2 deletions(-)

diff --git a/src/views/DocumentationV6View.vue b/src/views/DocumentationV6View.vue
index d427abe..7920276 100644
--- a/src/views/DocumentationV6View.vue
+++ b/src/views/DocumentationV6View.vue
@@ -635,6 +635,7 @@ const mobileNavOpen = ref(false);
               <router-link to="#config-documentation">Documentation</router-link>
               <router-link to="#config-postgresql">PostgreSQL</router-link>
               <router-link to="#config-s3">S3 Storage</router-link>
+              <router-link to="#config-gcs">GCS Storage</router-link>
               <router-link to="#config-oauth2-values">OAuth2/OIDC</router-link>
               <router-link to="#config-toolchain-values">Toolchain Server</router-link>
             </nav>
@@ -823,6 +824,40 @@ const mobileNavOpen = ref(false);
                 description="S3 request timeout in seconds." />
             </ConfigGrid>
 
+            <MinorHeader id="config-gcs">GCS Storage</MinorHeader>
+            <TextBlock>
+              Google Cloud Storage is an alternative to <router-link to="#config-s3">S3</router-link>. Only one
+              remote storage backend can be enabled at a time; Kellnr exits on startup if both
+              <code>s3.enabled</code> and <code>gcs.enabled</code> are set. Credentials are taken from
+              Application Default Credentials, so Kellnr picks up
+              <code>GOOGLE_APPLICATION_CREDENTIALS</code>, the <code>gcloud</code> ADC file, workload identity,
+              or the metadata server without any credential settings of its own.
+            </TextBlock>
+            <ConfigGrid>
+              <ConfigCard title="GCS Enabled" toml="[gcs] enabled" env-var="KELLNR_GCS__ENABLED" default-value="false"
+                description="Enable Google Cloud Storage instead of local file system. Cannot be combined with S3." />
+              <ConfigCard title="Endpoint" toml="[gcs] endpoint" env-var="KELLNR_GCS__ENDPOINT" default-value="None"
+                description="Custom base URL for a self-hosted or emulator endpoint. When omitted, the public Google Cloud Storage API is used." />
+              <ConfigCard title="Allow HTTP" toml="[gcs] allow_http" env-var="KELLNR_GCS__ALLOW_HTTP"
+                default-value="true" description="Allow unsecure GCS connection with HTTP. Needed when the endpoint uses HTTP." />
+              <ConfigCard title="Skip Signature" toml="[gcs] skip_signature" env-var="KELLNR_GCS__SKIP_SIGNATURE"
+                default-value="false"
+                description="Skip credential lookup and request signing. Only for unauthenticated endpoints such as emulators." />
+              <ConfigCard title="Crates Bucket" toml="[gcs] crates_bucket" env-var="KELLNR_GCS__CRATES_BUCKET"
+                default-value="kellnr-crates" description="Bucket where Kellnr stores uploaded crates." />
+              <ConfigCard title="Crates.io Bucket" toml="[gcs] cratesio_bucket" env-var="KELLNR_GCS__CRATESIO_BUCKET"
+                default-value="kellnr-cratesio" description="Bucket for crates.io crates if the proxy is enabled." />
+              <ConfigCard title="Toolchain Bucket" toml="[gcs] toolchain_bucket" env-var="KELLNR_GCS__TOOLCHAIN_BUCKET"
+                default-value="kellnr-toolchains"
+                description="Bucket for toolchain archives if the toolchain server is enabled." />
+              <ConfigCard title="Connect Timeout" toml="[gcs] connect_timeout_seconds"
+                env-var="KELLNR_GCS__CONNECT_TIMEOUT_SECONDS" default-value="5"
+                description="GCS connect timeout in seconds." />
+              <ConfigCard title="Request Timeout" toml="[gcs] request_timeout_seconds"
+                env-var="KELLNR_GCS__REQUEST_TIMEOUT_SECONDS" default-value="30"
+                description="GCS request timeout in seconds." />
+            </ConfigGrid>
+
             <MinorHeader id="config-oauth2-values">OAuth2/OIDC</MinorHeader>
             <ConfigGrid>
               <ConfigCard title="OAuth2 Enabled" toml="[oauth2] enabled" env-var="KELLNR_OAUTH2__ENABLED"
@@ -1406,6 +1441,11 @@ const mobileNavOpen = ref(false);
                   <td>Use S3 storage instead of local filesystem</td>
                   <td>false</td>
                 </tr>
+                <tr>
+                  <td><code>--gcs-enabled</code></td>
+                  <td>Use Google Cloud Storage instead of local filesystem</td>
+                  <td>false</td>
+                </tr>
                 <tr>
                   <td><code>--oauth2-enabled</code></td>
                   <td>Enable OAuth2/OIDC authentication</td>
@@ -1664,8 +1704,9 @@ const mobileNavOpen = ref(false);
               backup the data folder. The data folder contains all data needed to restore Kellnr. It is recommended to
               backup the data folder regularly, as it contains all uploaded crates and the SQLite database. If you use
               PostgreSQL instead, do not forget to backup the database separately. Likewise, if you enable
-              <router-link to="#config-s3">S3 storage</router-link>, your uploaded crates are stored in the configured
-              S3 buckets rather than the data folder — back those up separately as well.
+              <router-link to="#config-s3">S3</router-link> or
+              <router-link to="#config-gcs">GCS storage</router-link>, your uploaded crates are stored in the
+              configured buckets rather than the data folder — back those up separately as well.
             </TextBlock>
           </div>
         </div>
diff --git a/src/views/FeaturesView.vue b/src/views/FeaturesView.vue
index f2b2418..5125e50 100644
--- a/src/views/FeaturesView.vue
+++ b/src/views/FeaturesView.vue
@@ -379,6 +379,7 @@
             <ul class="deployment-list">
               <li><i class="mdi mdi-folder"></i> Local filesystem (default)</li>
               <li><i class="mdi mdi-aws"></i> AWS S3</li>
+              <li><i class="mdi mdi-google-cloud"></i> Google Cloud Storage</li>
               <li><i class="mdi mdi-database"></i> MinIO</li>
               <li><i class="mdi mdi-cloud"></i> S3-compatible services</li>
             </ul>

From 60474ce7cb8a1d317f1472e09c238f5c255cd8f2 Mon Sep 17 00:00:00 2001
From: Stefan Hausotte <stefan.hausotte@gmx.de>
Date: Sat, 29 Aug 2026 16:17:08 +0200
Subject: [PATCH 2/2] chore: update flake.nix

---
 flake.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/flake.lock b/flake.lock
index 94bff35..c508296 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,11 +2,11 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1761373498,
-        "narHash": "sha256-Q/uhWNvd7V7k1H1ZPMy/vkx3F8C13ZcdrKjO7Jv7v0c=",
+        "lastModified": 1787736819,
+        "narHash": "sha256-cV5xEJJK3BvhU8rEd4mC9UsmDi5qscv/kzGPhBRC5WA=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "6a08e6bb4e46ff7fcbb53d409b253f6bad8a28ce",
+        "rev": "9fbb54b33e91ee4ca368e35a78e0613c720600b3",
         "type": "github"
       },
       "original": {