MINIO使用域名反代 9000 端口，死活连接不上

2life.top

我用宝塔的面板直接反代就可以了，然后控制台的要加一个websocket配置就没了。我是两个控制台和分发两个域名

2life.top

BackDoor 发表于 2023-11-14 19:49
我用宝塔的反代不行。搞死了。一直连不上。

你minio用docker吗？另外你是打不开还是控制台进不去。可以的话把minio的配置文件发一下可以看看

2life.top

BackDoor 发表于 2023-11-14 19:54
是 配置 s3 连不上，使用端口就可以。使用反代的域名连不上。

你试试用服务器ip而不是127.0.0.1试试

万亩斜阳

没那么复杂吧。
我的。
域名替换成自己的，一个io.baidu.com api，1个控制台console.io.baidu.com
申请证书，修改好路径
docker搭建映射好端口，把IP 1.2.3.4修改成自己的。

1. 
   
2. server {
   
3.         listen 80;
   
4.         server_name io.baidu.com;
   
5. 
   
6.         #如果需要http 301跳转到 https 需要将下面行前面的 # 注释去掉，并重载nginx
   
7.         return 301 https://$host$request_uri;
   
8.         access_log off;
   
9. }
   
10. 
    
11. server {
    
12.         listen 443 ssl;
    
13.         #listen [::]:443 ssl http2;
    
14.         server_name io.baidu.com;
    
15. 
    
16.         ssl_certificate /etc/nginx/conf.d/ssl/io.baidu.com.crt;
    
17.         ssl_certificate_key /etc/nginx/conf.d/ssl/io.baidu.com.key;
    
18.         ssl_session_timeout 5m;
    
19.         ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
    
20.         ssl_prefer_server_ciphers on;
    
21.         ssl_ciphers "TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5";
    
22.         ssl_session_cache builtin:1000 shared:SSL:10m;
    
23. 
    
24.         # To allow special characters in headers
    
25.         ignore_invalid_headers off;
    
26.         # Allow any size file to be uploaded.
    
27.         # Set to a value such as 1000m; to restrict file size to a specific value
    
28.         client_max_body_size 0;
    
29.         # To disable buffering
    
30.         proxy_buffering off;
    
31. 
    
32.         # Proxy requests to the bucket "photos" to MinIO server running on port 9000
    
33.         location / {
    
34.             proxy_set_header X-Real-IP $remote_addr;
    
35.             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    
36.             proxy_set_header X-Forwarded-Proto $scheme;
    
37.             proxy_set_header Host $http_host;
    
38. 
    
39.             proxy_connect_timeout 300;
    
40.             # Default is HTTP/1, keepalive is only enabled in HTTP/1.1
    
41.             proxy_http_version 1.1;
    
42.             proxy_set_header Connection "";
    
43.             chunked_transfer_encoding off;
    
44.             
    
45.             #开启websocket连接
    
46.             proxy_set_header Upgrade $http_upgrade;
    
47.             proxy_set_header Connection "upgrade";
    
48. 
    
49.             proxy_pass http://1.2.3.4:9000;
    
50.         }
    
51. }
    
52. 
    
53. 
    
54. server {
    
55.         listen 443 ssl;
    
56.         #listen [::]:443 ssl http2;
    
57.         server_name console.io.baidu.com;
    
58. 
    
59.         ssl_certificate /etc/nginx/conf.d/ssl/console.io.baidu.com.crt;
    
60.         ssl_certificate_key /etc/nginx/conf.d/ssl/console.io.baidu.com.key;
    
61.         ssl_session_timeout 5m;
    
62.         ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
    
63.         ssl_prefer_server_ciphers on;
    
64.         ssl_ciphers "TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5";
    
65.         ssl_session_cache builtin:1000 shared:SSL:10m;
    
66.         # openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
    
67.         # ssl_dhparam /usr/local/nginx/conf/ssl/dhparam.pem;
    
68.         # To allow special characters in headers
    
69.         ignore_invalid_headers off;
    
70.         # Allow any size file to be uploaded.
    
71.         # Set to a value such as 1000m; to restrict file size to a specific value
    
72.         client_max_body_size 0;
    
73.         # To disable buffering
    
74.         proxy_buffering off;
    
75. 
    
76.         location / {
    
77.             proxy_set_header X-Real-IP $remote_addr;
    
78.             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    
79.             proxy_set_header X-Forwarded-Proto $scheme;
    
80.             proxy_set_header Host $http_host;
    
81. 
    
82.             proxy_connect_timeout 300;
    
83.             # Default is HTTP/1, keepalive is only enabled in HTTP/1.1
    
84.             proxy_http_version 1.1;
    
85.             proxy_set_header Connection "";
    
86.             chunked_transfer_encoding off;
    
87. 
    
88.             #开启websocket连接
    
89.             proxy_set_header Upgrade $http_upgrade;
    
90.             proxy_set_header Connection "upgrade";
    
91. 
    
92.             proxy_pass http://1.2.3.4:9001;
    
93.             # If you are using docker-compose this would be the hostname i.e. minio
    
94.             # Health Check endpoint might go here. See https://www.nginx.com/resources/wiki/modules/healthcheck/
    
95.             # /minio/health/live;
    
96.         }
    
97. }
    

复制代码