feat(desktop): add client release updater

server/internal/shared/config/config.go

@@ -285,14 +285,17 @@ type QdrantConfig struct {
 }
 
 type ObjectStorageConfig struct {
-	Provider      string `mapstructure:"provider"`
-	Endpoint      string `mapstructure:"endpoint"`
-	AccessKey     string `mapstructure:"access_key"`
-	SecretKey     string `mapstructure:"secret_key"`
-	Bucket        string `mapstructure:"bucket"`
-	UseSSL        bool   `mapstructure:"use_ssl"`
-	PublicBaseURL string `mapstructure:"public_base_url"`
-	Region        string `mapstructure:"region"`
+	Provider      string        `mapstructure:"provider"`
+	Endpoint      string        `mapstructure:"endpoint"`
+	AccessKey     string        `mapstructure:"access_key"`
+	SecretKey     string        `mapstructure:"secret_key"`
+	Bucket        string        `mapstructure:"bucket"`
+	UseSSL        bool          `mapstructure:"use_ssl"`
+	PublicBaseURL string        `mapstructure:"public_base_url"`
+	BucketACL     string        `mapstructure:"bucket_acl"`
+	ObjectACL     string        `mapstructure:"object_acl"`
+	SignedURLTTL  time.Duration `mapstructure:"signed_url_ttl"`
+	Region        string        `mapstructure:"region"`
 }
 
 type JWTConfig struct {
@@ -956,6 +959,15 @@ func applyEnvOverrides(cfg *Config) {
 	if publicBaseURL, ok := lookupNonEmptyEnv("OBJECT_STORAGE_PUBLIC_BASE_URL"); ok {
 		cfg.ObjectStorage.PublicBaseURL = publicBaseURL
 	}
+	if bucketACL, ok := lookupNonEmptyEnv("OBJECT_STORAGE_BUCKET_ACL"); ok {
+		cfg.ObjectStorage.BucketACL = bucketACL
+	}
+	if objectACL, ok := lookupNonEmptyEnv("OBJECT_STORAGE_OBJECT_ACL"); ok {
+		cfg.ObjectStorage.ObjectACL = objectACL
+	}
+	if ttl, ok := lookupDurationEnv("OBJECT_STORAGE_SIGNED_URL_TTL"); ok {
+		cfg.ObjectStorage.SignedURLTTL = ttl
+	}
 	if region, ok := lookupNonEmptyEnv("OBJECT_STORAGE_REGION"); ok {
 		cfg.ObjectStorage.Region = region
 	}