Folders, Access and Websites

NAS Reborn has no separate concepts for shares, buckets and sites. There is one directory tree, managed on the Content tab, and every top-level folder in it is an SMB share, an S3 bucket and a website at the same time.

One tree

Create a folder called photos, in the app, in the Files app, or with any S3 client's create-bucket, and it immediately exists in every sense:

as the folder photos on the network drive,
as the S3 bucket photos for signed clients,
as the website https://yourserver.nas2.dk/photos/ when public,
and as a plain folder you can browse and edit in the Files app.

The same bytes, no copies, no sync step. Deleting the folder removes the share, the bucket and the site, because they were never separate things.

A git repository is one of these folders too, with a .git directory inside it, so it is a share and a bucket like any other. A camera feed is not a folder at all, but it takes its name from the same list, so nothing in the tree can end up sharing a name with anything else.

Off, private, protected or public

Each top-level folder has exactly one setting: its access level, inherited by everything inside it. The four levels form a ladder where each step widens the audience and never takes anyone away.

Off: the folder stays in the tree and in the Files app but is not shared or served at all.
Private, the default. The folder is on the network drive for signed-in accounts, and S3 requests need a signature from one of your access keys. Web browsers are always refused, so a folder dropped into Files is never accidentally world-readable.
Protected: exactly private as far as S3 is concerned, and a web browser may read it after signing in with a device account. Use it for pages meant for the household rather than the world.
Public read: anyone can view and download over the web; the folder serves as a website. All changes still require a signed request, and so does listing the folder over S3, so a public site does not reveal its complete file inventory.

Backups are the exception. A folder holding a Time Machine backup is a complete copy of somebody's Mac, so it is never handed to an anonymous web visitor whatever its access level says. The network drive, signed S3 clients and signed-in browsers are unaffected.

Websites

A public folder serves its index.html at /photos/ and shows its 404.html for missing pages; place both in the folder root. Without an index.html, a per-folder toggle decides whether visitors get a plain directory listing. Edit a page in the Files app, or upload it with an S3 client, and the change is live on the next request. Appending ?w=400 to an image URL returns a downscaled copy, handy for thumbnails.

Which folder answers at the server's front door, /, is your choice: pick a default website in Settings, or leave the built-in landing page. For sites with layouts, Markdown and posts, see Template Sites.

The Files app is part of the product

The whole tree is visible in the Files app under On My iPhone → NAS Reborn, and in the Finder when connected by cable. Import folders by dragging them in, get everything out the same way; your data never needs an export feature because it was never locked in. Long-press a folder in NAS Reborn to open it directly in Files.

Hidden files stay hidden. Files and folders whose name starts with a dot or an underscore (.git, .env, .DS_Store, _config.yml, _layouts) are never served to web visitors, even in public folders. Your own signed S3 clients still see them, so syncing a working directory round-trips completely.

Folders from other apps and drives

NAS Reborn can also serve a folder that lives outside its own storage: a directory on a USB drive, or one managed by another app such as Working Copy. Add it with the folder picker, or drag it in from the Files app, and it appears as a normal folder in the tree, labeled with where it lives: "Managed by" the owning app, the drive's name, or On My iPhone. Adding an external folder and sharing it on the network drive is free, like any other folder; serving it as a website or an S3 bucket is part of the Pro unlock. Adapters, power and drive formats are covered in External Drives.

When an external folder becomes unreachable, because the drive was unplugged or the owning app removed, its row says so in plain words, and web and S3 clients get a "try again later" answer rather than a deleted-looking error, so no sync client mistakes a missing drive for deleted data. Removing an external folder just stops serving it; the external files are never touched.

Free tier limits

The free tier serves up to 2 folders, each serving up to 5 GB over web and S3. The limits stop serving, never sharing: SMB and Files-app writes are not counted, so a Time Machine backup grows freely past any quota. A folder over its serving quota stops answering web and S3 downloads and refuses new uploads until it is back under (listing and deleting stay open so you can fix it), and with more than 2 folders turned on, sharing and serving pause entirely until a folder is set to Off or deleted. The Pro unlock removes all of it.

Two folders do not count against that limit. Git repositories have a budget of their own, and the Time Machine folder is exempt entirely: it is created for you the first time a Mac backs up, and a free feature should not turn into a surprise paywall for anyone already at the cap.