diff --git a/app/Http/Controllers/ChatController.php b/app/Http/Controllers/ChatController.php
index 49372303..447b6091 100644
--- a/app/Http/Controllers/ChatController.php
+++ b/app/Http/Controllers/ChatController.php
@@ -55,7 +55,7 @@ class ChatController extends Controller
 
         if ($request->hasFile('attachment')) {
             $file = $request->file('attachment');
-            $attachment = $file->store('chat', 'uploads');
+            $attachment = $file->store('chat', 'local');
             $mime = $file->getMimeType();
 
             if (str_starts_with($mime, 'image')) $attachmentType = 'image';
diff --git a/app/Http/Controllers/FileController.php b/app/Http/Controllers/FileController.php
new file mode 100644
index 00000000..cd81e13a
--- /dev/null
+++ b/app/Http/Controllers/FileController.php
@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Support\Facades\Storage;
+
+class FileController extends Controller
+{
+    /**
+     * Sirve archivos privados con autenticación.
+     * El parámetro $path incluye el módulo como primer segmento:
+     *   chat/filename.jpg
+     *   profiles/avatar.jpg
+     *   tasks/homework.pdf
+     */
+    public function serve(string $path)
+    {
+        if (!Storage::disk('local')->exists($path)) {
+            abort(404);
+        }
+
+        return Storage::disk('local')->response($path);
+    }
+}
diff --git a/config/filesystems.php b/config/filesystems.php
index 21cd5774..b27ea19d 100644
--- a/config/filesystems.php
+++ b/config/filesystems.php
@@ -49,7 +49,7 @@ return [
 
         'uploads' => [
             'driver' => 'local',
-            'root' => public_path('uploads'),
+            'root' => env('UPLOADS_DISK_ROOT', public_path('uploads')),
             'url' => env('APP_URL').'/uploads',
             'visibility' => 'public',
             'throw' => false,
diff --git a/resources/views/chat/show.blade.php b/resources/views/chat/show.blade.php
index 1af3538b..3657ca9c 100644
--- a/resources/views/chat/show.blade.php
+++ b/resources/views/chat/show.blade.php
@@ -27,17 +27,17 @@
                     @endif
                     @if($msg->attachment)
                         @if($msg->attachment_type === 'image')
-                            <img src="{{ Storage::disk('uploads')->url($msg->attachment) }}" class="img-fluid rounded mt-1">
+                            <img src="{{ route('files.serve', ['path' => $msg->attachment]) }}" class="img-fluid rounded mt-1">
                         @elseif($msg->attachment_type === 'audio')
                             <audio controls class="mt-1" style="max-width:250px">
-                                <source src="{{ Storage::disk('uploads')->url($msg->attachment) }}">
+                                <source src="{{ route('files.serve', ['path' => $msg->attachment]) }}">
                             </audio>
                         @elseif($msg->attachment_type === 'video')
                             <video controls class="mt-1 rounded" style="max-width:250px">
-                                <source src="{{ Storage::disk('uploads')->url($msg->attachment) }}">
+                                <source src="{{ route('files.serve', ['path' => $msg->attachment]) }}">
                             </video>
                         @else
-                            <a href="{{ Storage::disk('uploads')->url($msg->attachment) }}" target="_blank" class="btn btn-sm btn-light mt-1">
+                            <a href="{{ route('files.serve', ['path' => $msg->attachment]) }}" target="_blank" class="btn btn-sm btn-light mt-1">
                                 <i class="fas fa-file"></i> Ver archivo
                             </a>
                         @endif
@@ -86,7 +86,7 @@
 <script>
 const receiverId = {{ $user->id }};
 const authId = {{ auth()->id() }};
-const storageBase = '{{ rtrim(Storage::disk('uploads')->url(''), '/') }}';
+const storageBase = '{{ url('/files') }}';
 const chatMessages = document.getElementById('chat-messages');
 
 // scroll al fondo
diff --git a/routes/web.php b/routes/web.php
index faead880..62116bde 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -7,6 +7,7 @@ use App\Http\Controllers\AreaController;
 use App\Http\Controllers\CampanController;
 use App\Http\Controllers\CarreraController;
 use App\Http\Controllers\ChatController;
+use App\Http\Controllers\FileController;
 use App\Http\Controllers\CodeController;
 use App\Http\Controllers\ConceptoController;
 use App\Http\Controllers\DocenteController;
@@ -54,7 +55,8 @@ Route::middleware(['auth:sanctum',config('jetstream.auth_session'),'verified',
         Route::resource('/concepto',ConceptoController::class);
         Route::get('/chat', [ChatController::class, 'index'])->name('chat.index');
         Route::get('/chat/{user}', [ChatController::class, 'show'])->name('chat.show');
-        Route::post('/chat/send', [ChatController::class, 'send'])->name('chat.send');Route::resource('/docente',DocenteController::class);
+        Route::post('/chat/send', [ChatController::class, 'send'])->name('chat.send');
+        Route::get('/files/{path}', [FileController::class, 'serve'])->where('path', '.*')->name('files.serve');Route::resource('/docente',DocenteController::class);
         Route::resource('/documento',DocumentoController::class);
         Route::get('/documento/ver/{id}', function ($id) { $doc = Documento::findOrFail($id);  $alumno = auth()->user()->alumnos()->first(); if (!$alumno || $doc->alumno_id !== $alumno->id) { abort(403); } return response()->file( storage_path('app/public/'.$doc->archivo) ); });
         Route::get('/documento/ver/{id}', [DocumentoController::class, 'ver'])->name('documento.ver');
@@ -84,6 +86,12 @@ Route::middleware(['auth:sanctum',config('jetstream.auth_session'),'verified',
         Route::resource('/plantel',PlantelController::class);
         Route::get('/registros', [CodeController::class,'registros' ])->name('registros');
         Route::resource('/role',RoleController::class);
+        Route::get('/storage/{path}', function ($path) { $fullPath = storage_path('app/public/' . $path);
+                    if (!file_exists($fullPath)) {
+                        abort(404);
+                    }
+                    return response()->file($fullPath);
+                })->where('path', '.*')->middleware('auth');
         // Route::get('/test-chat', function () { broadcast(new MessageSent('Hola realtime ')); return 'Mensaje enviado';});
         Route::resource('/turno',TurnoController::class);
         Route::resource('/user',UserController::class);