Features
Media pipeline
Upload limits, async virus scan, and thumbnail generation for attachments.
Media pipeline
Every attachment upload passes through tenant size limits, optional ClamAV scan, and thumbnail jobs before messages reference the file.
Console
Settings → Media (/settings/media)
| Setting | Purpose |
|---|---|
| Max file size | Reject oversized uploads early |
| Allowed MIME types | Block unexpected content types |
| Scan mode | off, builtin, clamav |
Behaviour
POST /uploadstores the object in R2.- Async scan and thumbnail job queued.
- Infected files blocked on send. Clean files get inline thumbnail URLs in messages.
Built-in safety
EICAR test files are blocked even without ClamAV (builtin mode).
Environment
| Variable | Purpose |
|---|---|
MEDIA_PIPELINE_ENABLED | Master toggle |
CLAMAV_HTTP_URL | Self-hosted ClamAV HTTP wrapper |
MEDIA_MAX_BYTES | Default max upload size |
Optional ClamAV
Self-host an HTTP ClamAV wrapper. See Optional integrations.