Environment
# backend/.env
BLOB_TYPE=azure
BLOB_CONTAINER=screenjson
AZURE_STORAGE_ACCOUNT=mystorageaccount
AZURE_STORAGE_KEY=…
Or use a connection string:
AZURE_STORAGE_CONNECTION_STRING=DefaultEndpointsProtocol=https;AccountName=…;AccountKey=…;EndpointSuffix=core.windows.net
Shared Access Signatures (SAS)
For short-lived credentials, set a SAS token:
AZURE_STORAGE_SAS_TOKEN=?sv=2024-01-01&ss=b&srt=sco&sp=rwl&...
Greenlight prefers connection string over account key over SAS, in that order. Supply whichever suits your deployment.
RBAC
The identity you configure needs
Storage Blob Data Contributor at minimum on the container. For
production, scope the role to the container rather than the account.