Nginx Minio S3 config

s3-minio-nginx.conf

server {

 listen 80;
 server_name s3.exemplo.com;
 client_max_body_size  20000M;

  location / {

    proxy_buffering off;
    proxy_set_header Host $http_host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;

 
    proxy_pass http://10.1.1.10:3000;


 }
  location /minio {
     allow 10.1.1.0/24;
    deny all;
    proxy_buffering off;
    proxy_set_header Host $http_host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;

    proxy_pass http://10.1.1.10:3000;

}

}



server {
listen 443 ssl http2;
 
  server_name  server_name s3.exemplo.com;

  ssl_certificate /letsencrypt/live/s3.exemplo.com/fullchain.pem;
  ssl_certificate_key /letsencrypt/live/s3.exemplo.com/privkey.pem;
  ssl_trusted_certificate /letsencrypt/live/s3.exemplo.com/fullchain.pem;
  
  ssl_protocols TLSv1.1 TLSv1.2;

  ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK';

  ssl_prefer_server_ciphers on;    

  client_max_body_size	20000M;

  location / {
    proxy_set_header Host $http_host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;

     proxy_buffering off;
    proxy_pass http://10.1.1.10:3000;


 }
  location /minio {
    allow 10.1.1.0/24;
    deny all;
     proxy_buffering off;
    proxy_set_header Host $http_host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;

    proxy_pass http://10.1.1.10:3000;

}
}