From d666b621bf16cf99f92ca6bb51a12d7211161821 Mon Sep 17 00:00:00 2001 From: Eliah Rusin Date: Fri, 9 Jan 2026 12:11:30 +0300 Subject: [PATCH] fix: Set cipher for filerS3Options in filer.go Propagate filer encryption intent into the embedded S3 options: - In `weed/command/filer.go` inside `runFiler()` when `-s3` is enabled: - Set `filerS3Options.cipher = f.cipher` before calling `filerS3Options.startS3Server()`. This ensures: - `filerS3Options.cipher` is always non-nil in the embedded S3 path - embedded S3 inherits `-encryptVolumeData` behavior from the filer configuration --- weed/command/filer.go | 1 + 1 file changed, 1 insertion(+) diff --git a/weed/command/filer.go b/weed/command/filer.go index 64d227b95..0201a80e6 100644 --- a/weed/command/filer.go +++ b/weed/command/filer.go @@ -228,6 +228,7 @@ func runFiler(cmd *Command, args []string) bool { filerAddress := pb.NewServerAddress(*f.ip, *f.port, *f.portGrpc).String() startDelay := time.Duration(2) if *filerStartS3 { + filerS3Options.cipher = f.cipher filerS3Options.filer = &filerAddress if *filerS3Options.bindIp == "" { filerS3Options.bindIp = f.bindIp