Make MinIO bucket creation opt-in with production-safe defaults.

Require buckets to exist by default on connect, extract env_bool parsing, and document local dev overrides for secure and auto-creation settings.

Co-authored-by: Cursor <[email protected]>

README.md

@@ -48,16 +48,19 @@ for key in repo.scan_keys("user:*"):
 
 ### MinIO (`ObjectRepositoryInterface`)
 
-| Environment variable | Description                                 |
-| -------------------- | ------------------------------------------- |
-| `MINIO_ENDPOINT`     | MinIO server endpoint                       |
-| `MINIO_ACCESS_KEY`   | Access key                                  |
-| `MINIO_SECRET_KEY`   | Secret key                                  |
-| `MINIO_BUCKET`       | Bucket name (created on connect if missing) |
-| `MINIO_SECURE`       | Use HTTPS (`true`/`false`; default: `true`) |
+| Environment variable             | Description                                                              |
+| -------------------------------- | ------------------------------------------------------------------------ |
+| `MINIO_ENDPOINT`                 | MinIO server endpoint                                                    |
+| `MINIO_ACCESS_KEY`               | Access key                                                               |
+| `MINIO_SECRET_KEY`               | Secret key                                                               |
+| `MINIO_BUCKET`                   | Bucket name                                                              |
+| `MINIO_SECURE`                   | Use HTTPS (`true`/`false`; default: `true`)                              |
+| `MINIO_CREATE_BUCKET_IF_MISSING` | Auto-create `MINIO_BUCKET` on connect (`true`/`false`; default: `false`) |
 
 Copy [`.env.example`](.env.example) to `.env` for local development. `RedisConfig.from_env()` and `MinioConfig.from_env()` load `.env` automatically when resolving configuration from the environment.
 
+For production, it is recommended to leave `MINIO_CREATE_BUCKET_IF_MISSING` unset so that `connect()` fails fast if the expected bucket is missing. For local development, you will often want `MINIO_SECURE=false` and `MINIO_CREATE_BUCKET_IF_MISSING=true`.
+
 ## Configuration injection
 
 Adapters accept optional `config` and `client` keyword arguments for explicit setup and testing:
@@ -73,6 +76,7 @@ minio = MinioAdapter(
         secret_key="minioadmin",
         bucket="my-bucket",
         secure=False,
+        # create_bucket_if_missing=True,  # convenient for local dev
     )
 )
 ```