zoey/config
1
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

updates

Browse source
This commit is contained in:
zack 2024-10-31 21:01:42 -04:00
parent 8ba8fc98ca
commit e2ee24b57a
No known key found for this signature in database
GPG key ID: 5F873416BCF59F35
13 changed files with 238 additions and 70 deletions
Download patch file Download diff file Expand all files Collapse all files

54
modules/nixos/sites/minio/default.nix
View file

@ -27,59 +27,27 @@ in {
rootCredentialsFile = config.age.secrets.minio.path;
};
services.nginx.virtualHosts."s3.zoeys.computer" = {
services.nginx.virtualHosts."minio.zoeys.computer" = {
forceSSL = true;
enableACME = true;
extraConfig = ''
# Allow special characters in headers
ignore_invalid_headers off;
# Allow any size file to be uploaded.
# Set to a value such as 1000m; to restrict file size to a specific value
client_max_body_size 0;
# Disable buffering
proxy_buffering off;
proxy_request_buffering off;
'';
locations."/" = {
proxyPass = "http://localhost${config.services.minio.listenAddress}";
extraConfig = ''
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_connect_timeout 300;
# Default is HTTP/1, keepalive is only enabled in HTTP/1.1
proxy_http_version 1.1;
proxy_set_header Connection "";
chunked_transfer_encoding off;
'';
};
locations."/minio/ui" = {
proxyPass = "http://localhost${config.services.minio.consoleAddress}";
extraConfig = ''
rewrite ^/minio/ui/(.*) /$1 break;
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-NginX-Proxy true;
# This is necessary to pass the correct IP to be hashed
real_ip_header X-Real-IP;
proxy_connect_timeout 300;
# To support websockets in MinIO versions released after January 2023
# To support websocket
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
# Some environments may encounter CORS errors (Kubernetes + Nginx Ingress)
# Uncomment the following line to set the Origin request to an empty string
# proxy_set_header Origin \'\';
chunked_transfer_encoding off;
'';
};
};
services.nginx.virtualHosts."s3.zoeys.computer" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://localhost${config.services.minio.listenAddress}";
};
};
};
}