1
upstream minio_s3 {
2
   least_conn;
3
   server minio-01.internal-domain.com:9000;
4
   server minio-02.internal-domain.com:9000;
5
   server minio-03.internal-domain.com:9000;
6
   server minio-04.internal-domain.com:9000;
7
}
8

9
upstream minio_console {
10
   least_conn;
11
   server minio-01.internal-domain.com:9001;
12
   server minio-02.internal-domain.com:9001;
13
   server minio-03.internal-domain.com:9001;
14
   server minio-04.internal-domain.com:9001;
15
}
16

17
server {
18
   listen       80;
19
   listen  [::]:80;
20
   server_name  minio.example.net;
21

22
   # Allow special characters in headers
23
   ignore_invalid_headers off;
24
   # Allow any size file to be uploaded.
25
   # Set to a value such as 1000m; to restrict file size to a specific value
26
   client_max_body_size 0;
27
   # Disable buffering
28
   proxy_buffering off;
29
   proxy_request_buffering off;
30

31
   location / {
32
      proxy_set_header Host $http_host;
33
      proxy_set_header X-Real-IP $remote_addr;
34
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
35
      proxy_set_header X-Forwarded-Proto $scheme;
36

37
      proxy_connect_timeout 300;
38
      # Default is HTTP/1, keepalive is only enabled in HTTP/1.1
39
      proxy_http_version 1.1;
40
      proxy_set_header Connection "";
41
      chunked_transfer_encoding off;
42

43
      proxy_pass https://minio_s3; # This uses the upstream directive definition to load balance
44
   }
45

46
   location /minio/ui/ {
47
      rewrite ^/minio/ui/(.*) /$1 break;
48
      proxy_set_header Host $http_host;
49
      proxy_set_header X-Real-IP $remote_addr;
50
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
51
      proxy_set_header X-Forwarded-Proto $scheme;
52
      proxy_set_header X-NginX-Proxy true;
53

54
      # This is necessary to pass the correct IP to be hashed
55
      real_ip_header X-Real-IP;
56

57
      proxy_connect_timeout 300;
58

59
      # To support websockets in MinIO versions released after January 2023
60
      proxy_http_version 1.1;
61
      proxy_set_header Upgrade $http_upgrade;
62
      proxy_set_header Connection "upgrade";
63
      # Some environments may encounter CORS errors (Kubernetes + Nginx Ingress)
64
      # Uncomment the following line to set the Origin request to an empty string
65
      # proxy_set_header Origin '';
66

67
      chunked_transfer_encoding off;
68

69
      proxy_pass https://minio_console; # This uses the upstream directive definition to load balance
70
   }
71
}

1
location / {
2
  proxy_set_header Host $http_host;
3
  proxy_set_header X-Real-IP $remote_addr;
4
  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
5
  proxy_set_header X-Forwarded-Proto $scheme;
6

7
  proxy_connect_timeout 300;
8
  # Default is HTTP/1, keepalive is only enabled in HTTP/1.1
9
  proxy_http_version 1.1;
10
  proxy_set_header Connection "";
11
  chunked_transfer_encoding off;
12

13
  proxy_pass http://xxx:9000;
14
}

1
location /minio/ui/ {
2
    rewrite ^/minio/ui/(.*) /$1 break;
3
    proxy_set_header Host $http_host;
4
    proxy_set_header X-Real-IP $remote_addr;
5
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
6
    proxy_set_header X-Forwarded-Proto $scheme;
7
    proxy_set_header X-NginX-Proxy true;
8

9
    # This is necessary to pass the correct IP to be hashed
10
    real_ip_header X-Real-IP;
11

12
    proxy_connect_timeout 300;
13

14
    # To support websockets in MinIO versions released after January 2023
15
    proxy_http_version 1.1;
16
    proxy_set_header Upgrade $http_upgrade;
17
    proxy_set_header Connection "upgrade";
18
    # Some environments may encounter CORS errors (Kubernetes + Nginx Ingress)
19
    # Uncomment the following line to set the Origin request to an empty string
20
    # proxy_set_header Origin '';
21

22
    chunked_transfer_encoding off;
23

24
    proxy_pass http://xxx:9001; # This uses the upstream directive definition to load balance
25
}