Step 1: Create a Storage Account
Via the Azure CLI
Via the Azure Portal
- Go to Storage accounts → + Create
- Select your subscription and resource group
- Enter a Storage account name (globally unique, 3–24 characters, lowercase alphanumeric only)
- Choose your Region
- Leave Redundancy as Locally-redundant storage (LRS)
- Click Review + create, then Create
Step 2: Create the Container
Via the Azure CLI
Via the Azure Portal
- Go to Storage accounts → select your account
- In the left sidebar, under Data storage, click Containers
- Click + Container
- Enter a name and click Create
Step 3: Get the Account Key
Via the Azure CLI
Via the Azure Portal
- Go to Storage accounts → select your account
- In the left sidebar, under Security + networking, click Access keys
- Click Show next to key1 and copy the Key value
Step 4: Configure CORS
Tembo uploads image attachments directly from the browser to the storage container. Azure blocks these cross-origin requests by default, so you must add a CORS rule.Via the Azure CLI
http://<vm-ip> with your domain.
Via the Azure Portal
- Go to Storage accounts → select your account
- In the left sidebar, under Settings, click Resource sharing (CORS)
- Select the Blob service tab
- Click + Add and fill in:
- Allowed origins:
http://<vm-ip>(or your domain) - Allowed methods:
DELETE,GET,HEAD,OPTIONS,PUT - Allowed headers:
* - Exposed headers:
* - Max age:
3600
- Allowed origins:
- Click Save
Step 5: Add to config.json
Open/var/lib/tembo/config.json (via the VS Code server at http://<vm-ip>:8888 or SSH) and add: