minio添加https支持

概览：

• nginx配置
  • minioServer
  • minioConsole

以minio的docker镜像为例来说明给minio添加https。

swarm

minio:
  image: minio/minio:latest
  command: server --address ":443" --console-address ":9100" /data
  networks:
    - ingress
  ports:
    - 9100:9100
  environment:
    - MINIO_ACCESS_KEY=admin
    - MINIO_SECRET_KEY=admin
    - MINIO_DOMAIN=minio.example.cc
    - MINIO_SERVER_URL=https://minio.example.cc
  volumes:
    - /data/minio/bucket:/data
    - /data/minio/config:/root/.minio

nginx配置

minioServer

server {
    listen  443 ssl http2;
    server_name  minio.example.cc;

    ssl_certificate /etc/nginx/certs/cert.pem;
    ssl_certificate_key /etc/nginx/certs/cert.key;

    # To allow special characters in headers
    ignore_invalid_headers off;
    # Allow any size file to be uploaded.
    # Set to a value such as 1000m; to restrict file size to a specific value
    client_max_body_size 10000m;
    # To disable buffering
    proxy_buffering off;
    proxy_request_buffering off;
    
    location / {
        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_connect_timeout 300;
        # Default is HTTP/1, keepalive is only enabled in HTTP/1.1
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        chunked_transfer_encoding off;

        proxy_pass http://minioServer;
    }
}

minioConsole

server {
    listen  9100 ssl http2;
    server_name  minio.example.cc;

    ssl_certificate /etc/nginx/certs/cert.pem;
    ssl_certificate_key /etc/nginx/certs/cert.key;

    # To allow special characters in headers
    ignore_invalid_headers off;
    # Allow any size file to be uploaded.
    # Set to a value such as 1000m; to restrict file size to a specific value
    client_max_body_size 10000m;
    # To disable buffering
    proxy_buffering off;
    proxy_request_buffering off;
    
    location / {
        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_connect_timeout 300;
        # Default is HTTP/1, keepalive is only enabled in HTTP/1.1
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        chunked_transfer_encoding off;

        proxy_pass http://minioConsole;
    }
}