Enabling S3 bucket encryption for the default `pydiods1` datasource makes `binaries` bucket download fail

For first post, please answer the questions below!

Describe your issue in detail

I am installing a fresh Pydio Cells using Docker and wanting to store everything to a S3-compatible service. Right after the first-time web installation wizard and logging into the admin account, I proceeded to Cells Console page to enable encryption for all the default S3 buckets: cellsdata, personal, pydiods1, thumbnails, versions.

I cannot see a datasource for binaries.

File upload works and images are having their thumbnails generated.

But when I tried to upload an avatar picture, the image is uploaded to the binaries bucket but it cannot be downloaded by the browser.

Error log:

GroupPath : /
HttpProtocol : HTTP/1.1
JsonZaps : {"RequestHost":"cloud.example.com"}
Level : error
Logger : pydio.rest.frontend
Msg : Rest Error 500 - {"Id":"views.Handler.encryption","Code":404,"Detail":"failed to get node UUID: {\"Id\":\"pydio-binaries/users_binaries.admin-85cb6187-36f.png\",\"Code\":404,\"Detail\":\"Not found\",\"Status\":\"Not Found\"}","Status":"Not Found"}
RemoteAddress : xxx.xxx.xxx.xxx
SpanUuid : xxxxxxxx-xxxx-xxxxx-xxxxx-xxxxxxxxxxxx
Ts : 1731019889
UserAgent : Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36
UserName : admin
UserUuid : xxxxxxxx-xxxx-xxxxx-xxxxx-xxxxxxxxxxxx

What version of Cells are you using?

Pydio Cells Home Edition, 4.4.6, Docker Image

What is the server OS? Database name/version? Browser name or mobile device description (if issue appears client-side)?

Ubuntu 24.04
MariaDB 11
Chromium-based browser

Traefik v2 as reverse proxy and HTTPS handler.

What steps have you taken to resolve this issue already?

I have found a temporary solution is to disable encryption for the pydiods1 bucket, after which I am able to upload and fetch the profile picture.

But if I reset the profile picture, the images remain in the binaries bucket. Is this expected behaviour?

I tried that because the error was related to “views.Handler.encryption” module, and I saw that in the pydio.json config file that the datasource for binaries is “default” which is referring to the pydiods1 bucket.

However, I still wish to enable encryption for all my buckets if possible. Thank you in advance for looking into this.