use guide from here (adjust ports, drop upstream)

https://min.io/docs/minio/linux/integrations/setup-nginx-proxy-with-minio.html

diff --git a/etc/nginx/conf.d/default.conf b/etc/nginx/conf.d/default.conf
index d387c88f8b8f768daf88d7e590a51a4131bf29e1..0a2cd2e1e1457357e7f21a3df77a993a7b9f9703 100644 (file)
--- a/etc/nginx/conf.d/default.conf
+++ b/etc/nginx/conf.d/default.conf
@@ -56,31 +56,70 @@ server {
 
 # MinIO (file server for MedusaJS)
 server {
-  server_name s3.nutra.tk;
-  #listen 80;
-  listen 443 ssl http2;
-  location / {
-    # TODO: resolve weird host:port redirect issue?
-    proxy_set_header Host            $host;
-    proxy_set_header X-Forwarded-For $remote_addr;
-    proxy_pass http://localhost:9001;
-    # proxy_pass http://minio;
-  }
+   #listen       80;
+   listen 443 ssl http2;
+   server_name  s3.nutra.tk;
+
+   # Allow special characters in headers
+   ignore_invalid_headers off;
+   # Allow any size file to be uploaded.
+   # Set to a value such as 1000m; to restrict file size to a specific value
+   client_max_body_size 0;
+   # Disable buffering
+   proxy_buffering off;
+   proxy_request_buffering off;
+
+   location / {
+      proxy_set_header Host $http_host;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+      proxy_set_header X-Forwarded-Proto $scheme;
+
+      proxy_connect_timeout 300;
+      # Default is HTTP/1, keepalive is only enabled in HTTP/1.1
+      proxy_http_version 1.1;
+      proxy_set_header Connection "";
+      chunked_transfer_encoding off;
+
+      proxy_pass http://localhost:9001/; # This uses the upstream directive definition to load balance
+   }
 }
 
-# MinIO Console
 server {
-  server_name s3-admin.nutra.tk;
-  #listen 80;
-  listen 443 ssl http2;
-  location / {
-    # TODO: resolve websocket error on deployed domain
-    # To support websocket
-    proxy_http_version 1.1;
-    proxy_set_header Upgrade $http_upgrade;
-    proxy_set_header Connection "upgrade";
-    proxy_pass http://localhost:9002;
-  }
+   #listen       80;
+   listen 443 ssl http2;
+   server_name  s3-admin.nutra.tk;
+
+   # Allow special characters in headers
+   ignore_invalid_headers off;
+   # Allow any size file to be uploaded.
+   # Set to a value such as 1000m; to restrict file size to a specific value
+   client_max_body_size 0;
+   # Disable buffering
+   proxy_buffering off;
+   proxy_request_buffering off;
+
+   location / {
+      proxy_set_header Host $http_host;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+      proxy_set_header X-Forwarded-Proto $scheme;
+      proxy_set_header X-NginX-Proxy true;
+
+      # This is necessary to pass the correct IP to be hashed
+      real_ip_header X-Real-IP;
+
+      proxy_connect_timeout 300;
+
+      # To support websocket
+      proxy_http_version 1.1;
+      proxy_set_header Upgrade $http_upgrade;
+      proxy_set_header Connection "upgrade";
+
+      chunked_transfer_encoding off;
+
+      proxy_pass http://localhost:9002/; # This uses the upstream directive definition to load balance and assumes a static Console port of 9001
+   }
 }
 
 # UI, blog, favicon, default server