配置nginx访问minio-蒲公英云

配置nginx访问minio

梦里梦外; 2022-10-05 01:49 1030阅读 0赞

如果从https访问minio而又使用nginx代理的话，那么注意两边的证书要一致。

java那边把证书放在$JAVA_HOME/jre/lib/security下面，用以下命令引入：

keytool -import -alias public -keystore cacerts -file public.crt
changeit
keytool -list -keystore cacerts -alias public

nginx配置如下

#user  nobody;
worker_processes  1;
#pid        logs/nginx.pid;
events {
    worker_connections  1024;
}
http {
    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    keepalive_timeout  65;
    #gzip  on;
    server {
        listen       8081 default_server ssl;
        server_name  localhost;
        #ssl                  on;
        ssl_certificate     /root/enc/server.crt;#配置证书位置
        ssl_certificate_key  /root/enc/server.key;#配置秘钥位置
        ssl_session_timeout  5m;
        ssl_protocols  SSLv2 SSLv3 TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers  ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
        ssl_prefer_server_ciphers   on;
        location / {
            proxy_set_header Host $http_host;
            #minio内网端口
            proxy_pass https://127.0.0.1:9000/;
        }
        #外网端口
        error_page 497 400  https://$host:8999$request_uri;
    }
}