rules_version = '2';

service firebase.storage {
  match /b/{bucket}/o {
    match /{allPaths=**} {
      allow read;
      // Don't require auth, as dream uploads can be done by anyone
      allow write: if request.resource.size <= 10 * 1024 * 1024; // 10MB
    }
  }
}