部署 MinIO 通用 S3 协议对象存储服务当网盘和图床使用

前言

MinIO是一款高性能,功能强大的对象存储服务,支持通用的 S3协议,突发奇想可以把他拿来当私有网盘或者图床也是不错的选择.

MinIO 官网
MinIO 文档
MinIO GitHub

本文为 Stille 原创文章.经实践,测试,整理发布.如需转载请联系作者获得授权,并注明转载地址.

部署

前期准备

在部署之前需说明的是, MinIO如果用于外网,建议搭配 2个二级域名使用.本身该服务也有 9000和 9001端口.其中 9000为 API 端口,主要是用于上传下载的服务端口,而 9001是 Web 管理页面 的端口.

本文示例:
https://share.ioiox.com 反向代理至 9000端口用于 API 上传下载服务
https://drive.ioiox.com 反向代理至 9001端口用于 Web 管理

展开查看 nginx 配置

两个域名都可以参考以下配置文件,注意修改域名,端口,证书路径等信息.

<pre class="inline:true decode:1 " >server {
    listen 80;
    server_name  share.ioiox.com;
    return 301 https://share.ioiox.com$request_uri;
}

server {
    listen 443 ssl;
    server_name  share.ioiox.com;
    gzip on;

    ssl_certificate /usr/local/nginx/conf/ssl/ioiox.cer;
    ssl_certificate_key /usr/local/nginx/conf/ssl/ioiox.key;
    ssl_trusted_certificate /usr/local/nginx/conf/ssl/ioiox.cer;

    ssl_stapling on;
    ssl_stapling_verify on;
    ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers on;
    ssl_ciphers ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4;
    ssl_ecdh_curve secp384r1;
    ssl_session_timeout  10m;
    ssl_session_cache builtin:1000 shared:SSL:10m;
    ssl_session_tickets off;
    resolver 8.8.8.8 8.8.4.4 valid=60s ipv6=off;
    resolver_timeout 5s;
    add_header Strict-Transport-Security &quot;max-age=63072000&quot; always;

    location / {
        proxy_redirect off;
        proxy_pass http://127.0.0.1:9000;

        proxy_set_header  Host                $http_host;
        proxy_set_header  X-Real-IP           $remote_addr;
        proxy_set_header  X-Forwarded-Ssl     on;
        proxy_set_header  X-Forwarded-For     $proxy_add_x_forwarded_for;
        proxy_set_header  X-Forwarded-Proto   $scheme;
        proxy_set_header  X-Frame-Options     SAMEORIGIN;

        client_max_body_size        5000m;
        client_body_buffer_size     128k;

        proxy_connect_timeout 300;
        # Default is HTTP/1, keepalive is only enabled in HTTP/1.1
        proxy_http_version 1.1;
        proxy_set_header Connection &quot;&quot;;
        chunked_transfer_encoding off;
    }

}

<pre class="inline:true decode:1 " >server {

listen 80;

server_name share.ioiox.com;

return 301 https://share.ioiox.com$request_uri;

}

server {

listen 443 ssl;

server_name share.ioiox.com;

gzip on;

ssl_certificate /usr/local/nginx/conf/ssl/ioiox.cer;

ssl_certificate_key /usr/local/nginx/conf/ssl/ioiox.key;

ssl_trusted_certificate /usr/local/nginx/conf/ssl/ioiox.cer;

ssl_stapling on;

ssl_stapling_verify on;

ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;

ssl_prefer_server_ciphers on;

ssl_ciphers ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4;

ssl_ecdh_curve secp384r1;

ssl_session_timeout 10m;

ssl_session_cache builtin:1000 shared:SSL:10m;

ssl_session_tickets off;

resolver 8.8.8.8 8.8.4.4 valid=60s ipv6=off;

resolver_timeout 5s;

add_header Strict-Transport-Security "max-age=63072000" always;

location / {

proxy_redirect off;

proxy_pass http://127.0.0.1:9000;

proxy_set_header Host $http_host;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-Ssl on;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_set_header X-Forwarded-Proto $scheme;

proxy_set_header X-Frame-Options SAMEORIGIN;

client_max_body_size 5000m;

client_body_buffer_size 128k;

proxy_connect_timeout 300;

# Default is HTTP/1, keepalive is only enabled in HTTP/1.1

proxy_http_version 1.1;

proxy_set_header Connection "";

chunked_transfer_encoding off;

}

docker 部署

直接 docker 启动

<pre class="inline:true decode:1 " >docker run -d --name=minio --restart=always /
    -v /data:/data /
    -p 9000:9000 /
    -p 9001:9001 /
    -e MINIO_ROOT_USER=admin /
    -e MINIO_ROOT_PASSWORD=set_your_password /
    -e MINIO_SERVER_URL=https://share.ioiox.com /
    -e MINIO_BROWSER_REDIRECT_URL=https://drive.ioiox.com /
    minio/minio:latest server /data --console-address &quot;:9001&quot;

<pre class="inline:true decode:1 " >docker run -d --name=minio --restart=always /

-v /data:/data /

-p 9000:9000 /

-p 9001:9001 /

-e MINIO_ROOT_USER=admin /

-e MINIO_ROOT_PASSWORD=set_your_password /

-e MINIO_SERVER_URL=https://share.ioiox.com /

-e MINIO_BROWSER_REDIRECT_URL=https://drive.ioiox.com /

minio/minio:latest server /data --console-address ":9001"

或者使用 docker compose 启动

<pre class="inline:true decode:1 " >version: &quot;3&quot;
services:
  minio:
    image: minio/minio
    container_name: minio
    ports:
      - 9000:9000
      - 9001:9001
    volumes:
      - ./data:/data
      - ./config:/root/.minio
    environment:
      - MINIO_ROOT_USER=admin
      - MINIO_ROOT_PASSWORD=set_your_password
      - MINIO_SERVER_URL=https://share.ioiox.com
      - MINIO_BROWSER_REDIRECT_URL=https://drive.ioiox.com
    command: server /data --console-address &quot;:9001&quot;
    restart: always