Storage & Object — Nexocloud

S3-compatible object storage and 3-2-1 backup on a data plane you own.

A fully S3-compatible object store — buckets, versioning, lifecycle, multipart, presigned URLs and native S3 verbs — plus a backup and disaster-recovery plane with 3-2-1 audit, drill cadence, recovery ladders and DR topology. Intra-edge egress is zero-rated: no bandwidth ransom on the way out.

Auth is one model across every service here — an SS-01 bearer token plus X-Tenant-Id on every /api/v1 route. Public base https://api.nexocloud.io/api/v1.

2 real backends, 81 operations.

Every path below is a real route from services/<svc>/openapi.json. Each service lists a representative slice of its full contract.

DBaaS SS-02

58 operations

Object storage (S3/R2) — buckets, versioning, lifecycle, multipart uploads, presigned URLs, S3 access keys and native S3 verbs.

POST/api/v1/bucketsCreate a bucket backed by a sovereign storage claim.
PUT/api/v1/buckets/{bucket}/versioningEnable or suspend object versioning.
PUT/api/v1/buckets/{bucket}/lifecycleSet lifecycle rules (transition, expiry) on a bucket.
POST/api/v1/buckets/{bucket}/presignPresign a GET or PUT for a key (HMAC canonical signature).
POST/api/v1/object/access-keysIssue an S3 access key (R2-style API token).
PUT/s3/{bucket}/{key}Native S3 PutObject / UploadPart.

Backup & DR SS-30

23 operations

Backup & DR — snapshot schedules, 3-2-1 audit, restore, recovery ladders, DR topology and evidence-signed drills.

POST/api/v1/sets/{set}/backupsTake a backup of a protected set.
GET/api/v1/sets/{set}/audit-321Audit a set against the 3-2-1 copy rule.
POST/api/v1/sets/{set}/restoreRestore a set from a snapshot.
GET/api/v1/dr/ladderRead the recovery-ladder freshness across tiers.
POST/api/v1/drills/{id}/sign-offSign off a completed DR drill with evidence.

A versioned bucket with lifecycle and a presigned upload

Object storage that speaks S3 natively, with versioning and lifecycle you set through the control plane and zero-rated egress inside the edge.

Create the bucketPOST/api/v1/buckets

Backed by a sovereign RustFS claim under your tenant.

Turn on versioningPUT/api/v1/buckets/{bucket}/versioning

Every overwrite keeps a recoverable prior version.

Set lifecyclePUT/api/v1/buckets/{bucket}/lifecycle

Transition cold objects and expire stale versions automatically.

Presign an uploadPOST/api/v1/buckets/{bucket}/presign

Hand a browser a time-boxed PUT without exposing a key.

Where it sits in the platform.

Storage & Object does not reimplement the platform — it composes it. These are the services it leans on and the seams between them.

DBaaS object plane (SS-02)

S3/R2-compatible object store; buckets are storage claims scoped to your tenant.

Backup & DR (SS-30)

3-2-1 protection, drill evidence and recovery ladders over the same data plane.

Edge (SS-27)

Intra-edge egress is zero-rated and served near the client.

Vault (SS-05)

Access keys and their secrets are issued and custodied by Vault, never stored in the API.