nginx反向代理minio

代理API端口（9000） 如需开启Virtual Hosted Style风格访问参考链接

location ^~ / {
    proxy_set_header Host $http_host; 
    proxy_set_header X-Real-IP $remote_addr; 
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
    proxy_set_header X-Forwarded-Proto $scheme; 
    proxy_connect_timeout 300; 
    # Default is HTTP/1, keepalive is only enabled in HTTP/1.1
    proxy_http_version 1.1; 
    proxy_set_header Connection ""; 
    chunked_transfer_encoding off; 
    proxy_pass http://localhost:9000; 
    add_header Strict-Transport-Security "max-age=31536000"; 
    # 解决验证失败的问题
    proxy_cache_convert_head off; 
    proxy_cache off;
}

代理WEB端口（9001）

1.同域名访问

location ^~ /minio/ui {
    rewrite ^/minio/ui/(.*) /$1 break; 
    proxy_set_header Host $http_host; 
    proxy_set_header X-Real-IP $remote_addr; 
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
    proxy_set_header X-Forwarded-Proto $scheme; 
    proxy_set_header X-NginX-Proxy true; 
    # This is necessary to pass the correct IP to be hashed
    real_ip_header X-Real-IP; 
    proxy_connect_timeout 300; 
    # To support websockets in MinIO versions released after January 2023
    proxy_http_version 1.1; 
    proxy_set_header Upgrade $http_upgrade; 
    proxy_set_header Connection "upgrade"; 
    # Some environments may encounter CORS errors (Kubernetes + Nginx Ingress)
    # Uncomment the following line to set the Origin request to an empty string
    # proxy_set_header Origin '';
    chunked_transfer_encoding off; 
    proxy_pass http://localhost:9001; 
    add_header Strict-Transport-Security "max-age=31536000"; 
}

2.不同域名访问

location ^~ / {
    proxy_pass http://127.0.0.1:9001; 
    proxy_set_header Host $host; 
    proxy_set_header X-Real-IP $remote_addr; 
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
    proxy_set_header REMOTE-HOST $remote_addr; 
    proxy_set_header Upgrade $http_upgrade; 
    proxy_set_header Connection $http_connection; 
    proxy_set_header X-Forwarded-Proto $scheme; 
    proxy_set_header X-Forwarded-Port $server_port; 
    proxy_http_version 1.1; 
    add_header X-Cache $upstream_cache_status; 
    add_header Cache-Control no-cache; 
    proxy_ssl_server_name off; 
    proxy_ssl_name $proxy_host; 
    add_header Strict-Transport-Security "max-age=31536000"; 
}