attachment: use local file storage