Gleipnir/nixos-systems
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Switch reverse proxy to also handle s3 API

Browse source 
Without this we only get the console but can't actually access the
S3-compatible portion of the API
This commit is contained in:
Eli Ribble 2025-10-01 20:30:11 +00:00
parent 0632df5a30
commit 54b79f1437
2 changed files with 8 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

6
modules/system/minio.nix
View file

@ -4,14 +4,18 @@ with lib;
options.myModules.minio.enable = mkEnableOption "custom minio configuration";
config = mkIf config.myModules.minio.enable {
services.caddy.virtualHosts."s3.gleipnir.technology".extraConfig = ''
handle_path /console* {
reverse_proxy http://localhost:10081
}
reverse_proxy http://localhost:10080
'';
services.minio = {
certificatesDir = "/mnt/bigdisk/minio/certificates";
configDir = "/mnt/bigdisk/minio/config";
consoleAddress = "127.0.0.1:10080";
consoleAddress = "127.0.0.1:10081";
enable = true;
dataDir = ["/mnt/bigdisk/minio/data"];
listenAddress = "127.0.0.1:10080";
rootCredentialsFile = "/var/run/secrets/minio-env";
};
sops.secrets.minio-env = {

6
secrets/minio.env
View file

@ -1,4 +1,4 @@
MINIO_BROWSER_REDIRECT_URL=ENC[AES256_GCM,data:C2FUvvKDYBs8T8awUjGxcOmbi0YW1nZaF20g5/fF,iv:G0lGNVCimUYKScGU8wA36gJcAkVIJAOIB2f1xvQBZr8=,tag:FRzKstCYW/RHa/6LJzBxyw==,type:str]
MINIO_BROWSER_REDIRECT_URL=ENC[AES256_GCM,data:/rWgtcfGiTmxusUsWnKdSMmKPG6jX6sXIe2ly4SY5GwC2HCLKXY=,iv:txc22SaNq/sHl8xFE+4osbnL2riCM+ZArzqIq+1qni4=,tag:9+PYGeK4GvvGWb04dCUgKQ==,type:str]
MINIO_ROOT_USER=ENC[AES256_GCM,data:FWHZVWGWMY4NEd/lp6FNuy1VQ38SnIR288q3oZ7mrvb0AXc2,iv:hI4kZM/JlOK6qGE4Xi29Vrjaudk53b0v/wOd9EKgx6k=,tag:H8gopq1obn5Y0fPNreFU8w==,type:str]
MINIO_ROOT_PASSWORD=ENC[AES256_GCM,data:c+TiLy6KE7MpMQ2DXgPB41BIJqwpHsj/k8QbdUOP3KVQ2gET,iv:e2BJMKjUeKeWOlWL8yg/gTijmf7a0OF0Hu75tUQ8/K4=,tag:jENZIAh3wi3/SQDPv8Gi/A==,type:str]
MINIO_IDENTITY_OPENID_CONFIG_URL=ENC[AES256_GCM,data:0jgUN5XUzbpl+doSbVSnMXpoJtJy4CXvTJ864bCksTTHKciGcWMIDoK/xBDjcjPQ9Ny3M6RyOhouLOp7Zz4SIVKbqJQj5eGHKTBu2LSlnZx4gg==,iv:QJQDfqWYcupF14qE4mXmE2L13njpjgh5SSDbcS+gxto=,tag:QP5RVKF3JTDwPblBfPIElA==,type:str]
@ -18,7 +18,7 @@ sops_age__list_4__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb2
sops_age__list_4__map_recipient=age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge
sops_age__list_5__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiKzVKUlFRZXJad0VSUlNv\nTFVxYk91ZVUrNVFKYWJCSkQyWmhoUXVmd21FCmJUeENtaS8xTGxWMGs3T1hpNTBF\ndTBxM0ZTeHFxbStCckNkdWI1bDBHbGcKLS0tIHBUV1JIREJITTN3NEQ1ZTFJVnFM\nektnRDJsS0c5bkRzMVpubTdCdFlZajgKSyzgndvE6WuK+TCM7U1PZqYomKmGY/T9\nb7DsyVKpVJbHXuc2QH74bCLex4gWTMq+fcCitFppAgSqRgOR2HER+Q==\n-----END AGE ENCRYPTED FILE-----\n
sops_age__list_5__map_recipient=age1j90h7hcp4fctr2xwj4zf9cxuelm43wkujvryc9hk6rzzc37rwdmss035w7
sops_lastmodified=2025-10-01T19:31:19Z
sops_mac=ENC[AES256_GCM,data:UYy97YN9Fj8dcO71SHPcfFk8QtkS+3XAq/wWQnaxBixU2BnkMRfieJ2Oeai3EPiU3kOXPTkaOdv3+E5rTmY4WZl/qRTHldl9a7vnJdKJNPEM5fk1VdTbtOhYe8+sgmoyzgR+QgIHrJ1RTd36x5aYgGGwXtA19KLNGCfszcPin0Y=,iv:ubR4CFbz8p49YNLU52nObAYbiVD6nn6U+tVOfgn/wes=,tag:INzDrNnd3ve1YFVc3qFFMg==,type:str]
sops_lastmodified=2025-10-01T20:20:47Z
sops_mac=ENC[AES256_GCM,data:qkG4qxA0WRtvEpf0C6bAUWRF0dckXQbWg9Xlk9nHAtWq+/Oh4CocrXVvzZQAdASujs02ibiVKHr4PBGp4SXZTQPy6LN94EIt+JCEUdQdRZQPRsMOcRcPeGZpz3n6ecgo/lzORevesiQmCrN3gcwKvmjGD44KHCFBrBhXsyujRI4=,iv:QHjLzjUINRcHTEsyNayChZ5EJW3RKAl1NpjP/k2LzqU=,tag:TnsPSamYVXl5m5wZjM3y8Q==,type:str]
sops_unencrypted_suffix=_unencrypted
sops_version=3.10.2