通过nginx二级目录反向代理访问minio管理界面

目的
通过nginx路径转发反向代理minioconsole

前置条件
在启动minio服务前指定以下环境变量，MINIO_SERVER_URL为minio-api的地址，MINIO_BROWSER_REDIRECT_URL为minioconsole
的地址。可以按照实际需求配置

MINIO_SERVER_URL="https://yourdomain.com"
MINIO_BROWSER_REDIRECT_URL="https://yourdomain.com/your_subpath"

具体nginx配置参考如下：

upstream minio_s3 {
   least_conn;
   server minio-01.internal-domain.com:9000;
   server minio-02.internal-domain.com:9000;
   server minio-03.internal-domain.com:9000;
   server minio-04.internal-domain.com:9000;
}

upstream minio_console {
   least_conn;
   server minio-01.internal-domain.com:9090;
   server minio-02.internal-domain.com:9090;
   server minio-03.internal-domain.com:9090;
   server minio-04.internal-domain.com:9090;
}

server {
   listen       80;
   listen  [::]:80;
   server_name  minio.example.net;

   # Allow special characters in headers
   ignore_invalid_headers off;
   # Allow any size file to be uploaded.
   # Set to a value such as 1000m; to restrict file size to a specific value
   client_max_body_size 0;
   # Disable buffering
   proxy_buffering off;
   proxy_request_buffering off;

   location / {
      proxy_set_header Host $http_host;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Proto $scheme;

      proxy_connect_timeout 300;
      # Default is HTTP/1, keepalive is only enabled in HTTP/1.1
      proxy_http_version 1.1;
      proxy_set_header Connection "";
      chunked_transfer_encoding off;

      proxy_pass https://minio_s3; # This uses the upstream directive definition to load balance
   }

   location /minio/ui/ {
      rewrite ^/minio/ui/(.*) /$1 break;
      proxy_set_header Host $http_host;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Proto $scheme;
      proxy_set_header X-NginX-Proxy true;

      # This is necessary to pass the correct IP to be hashed
      real_ip_header X-Real-IP;

      proxy_connect_timeout 300;

      # To support websockets in MinIO versions released after January 2023
      proxy_http_version 1.1;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "upgrade";
      # Some environments may encounter CORS errors (Kubernetes + Nginx Ingress)
      # Uncomment the following line to set the Origin request to an empty string
      # proxy_set_header Origin '';

      chunked_transfer_encoding off;

      proxy_pass https://minio_console; # This uses the upstream directive definition to load balance
   }
}

通过docker-compose一键启动minio服务，示例如下：

version: '3'
services:
  minio:
    image: minio/minio:latest
    container_name: minio
    extra_hosts:
     - minio:172.30.55.127
    environment:
      - MINIO_ROOT_USER=用户名
      - MINIO_ROOT_PASSWORD=密码
      - MINIO_BROWSER_REDIRECT_URL=https://域名:端口/minio/ui
    command: server --address 172.30.55.127:9000 --console-address ':9999' http://minio/data{1...4}
    volumes:
      - /data/minio/data1:/data1
      - /data/minio/data2:/data2
      - /data/minio/data3:/data3
      - /data/minio/data4:/data4
      - /data/minio/config:/root/.minio/
      - /etc/localtime:/etc/localtime
    network_mode: host
    restart: always

官方文档：https://min.io/docs/minio/linux/integrations/setup-nginx-proxy-with-minio.html