instances: https://min.io/docs/minio/linux/integrations/setup-nginx-proxy-with-minio.html

代理 - subdomain

代理 - dedicated DNS

• upstream 做上游服务器，可提供负载均衡（least_conn; 指定分配算法：选择最小用户数的）。
• 这里的server 指向的是docker bridge模式下的本机localhost。可以使用docker指令查看。
• rewrite 指令将URL修改后发送至proxy_pass，以使后方感受不到差别。
• 配置好https 后注意监听443 + 写ssl + certificate ，而非未配置https的80 。否则无响应 or badgate

upstream minio_s3 {
   least_conn;
   server 172.17.0.1:9000;
}

upstream minio_console {
   least_conn;
   server 172.17.0.1:9001;
}

server {
    listen       443 ssl;
    listen  [::]:443 ssl;
    server_name  minio.api.hazysite.icu;

    ssl_certificate /etc/nginx/ssl/live/minio.api.hazysite.icu/fullchain.pem;
    ssl_certificate_key /etc/nginx/ssl/live/minio.api.hazysite.icu/privkey.pem;

   # Allow special characters in headers
   ignore_invalid_headers off;
   # Allow any size file to be uploaded.
   # Set to a value such as 1000m; to restrict file size to a specific value
   client_max_body_size 1000m;
   # Disable buffering
   proxy_buffering off;
   proxy_request_buffering off;

   location / {
      proxy_set_header Host $http_host;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Proto $scheme;

      proxy_connect_timeout 300;
      # Default is HTTP/1, keepalive is only enabled in HTTP/1.1
      proxy_http_version 1.1;
      proxy_set_header Connection "";
      chunked_transfer_encoding off;

      proxy_pass http://minio_s3;
   }

   location /minio/ui/ {
      rewrite ^/minio/ui/(.*) /$1 break;
      proxy_set_header Host $http_host;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Proto $scheme;
      proxy_set_header X-NginX-Proxy true;

      # This is necessary to pass the correct IP to be hashed
      real_ip_header X-Real-IP;

      proxy_connect_timeout 300;

      # To support websockets in MinIO versions released after January 2023
      proxy_http_version 1.1;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "upgrade";
      # Some environments may encounter CORS errors (Kubernetes + Nginx Ingress)
      # Uncomment the following line to set the Origin request to an empty string
      # proxy_set_header Origin '';

      chunked_transfer_encoding off;

      proxy_pass http://minio_console;
   }
}