django-tenants with nginx x-accel-redirects

I am trying to implement secured downloads for my tenants.

The following links are/might be relevant:

• https://djangosnippets.org/snippets/491/
• https://wellfire.co/learn/nginx-django-x-accel-redirects/
• https://www.digitalocean.com/community/questions/nginx-rule-for-wildcard-url
• https://django-tenants.readthedocs.io/en/latest/files.html#configuring-media-file-storage

I cannot claim to fully understand the nginx x-accel-redirects and their security implications. This is something I will dive deeper into later. First I need to understand how to get this to work with django-tenats.

The references discuss that a /protected/ folder (with whatever name) is used to store the files. I assume that this folder must be present in the media folder of all tenants. Also, how do I setup nginx such that this folder is found in each tenant’s media subfolder.

Can somebody provide any pointers, examples, etc to get this to work and such that I can understand this better?

[tomturner]

I wouldn’t recommend it if it didn’t work with DT

[hanckmann]

Oke, I figured it out… it was a settings-issue that was holding me back.

and thanks for: https://github.com/edoburu/django-private-storage/pull/22