腾讯云轻量Docker部署单节点MinIO

curl -fsSL https://get.docker.com | bash -s docker --mirror Aliyun

docker run \  -p 9000:9000 \  -p 9001:9001 \  --name minio1 \  -v /home/minio/data:/data \  -e "MINIO_ROOT_USER=Your_Login_User_Name" \  -e "MINIO_ROOT_PASSWORD=Your_Login_User_Password" \  quay.io/minio/minio server /data --console-address ":9001"

apt install -y openssl libssl-dev libpcre3 libpcre3-devwget http://nginx.org/download/nginx-1.21.6.tar.gztar -xvzf nginx-1.21.6.tar.gzcd nginx-1.21.6./configure --user=www --group=www --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module --with-http_v2_module --with-http_gzip_static_module --with-http_sub_module --with-stream --with-stream_ssl_module --with-http_realip_module --with-http_gzip_static_modulemake instllln -s /usr/local/nginx/sbin/nginx /usr/bin/nginx

vi /usr/lib/systemd/system/nginx.service

[Unit]Description=nginx - high performance web server Documentation=http://nginx.org/en/docs/After=network.target remote-fs.target nss-lookup.target[Service]Type=forkingPIDFile=/usr/local/nginx/logs/nginx.pidExecStartPre=/usr/local/nginx/sbin/nginx -t -c /usr/local/nginx/conf/nginx.confExecStart=/usr/local/nginx/sbin/nginx -c /usr/local/nginx/conf/nginx.confExecReload=/bin/kill -s HUP $MAINPIDExecStop=/bin/kill -s QUIT $MAINPIDPrivateTmp=true[Install]WantedBy=multi-user.target

systemctl start nginx

server { listen 80; server_name example.com; # To allow special characters in headers ignore_invalid_headers off; # Allow any size file to be uploaded. # Set to a value such as 1000m; to restrict file size to a specific value client_max_body_size 0; # To disable buffering proxy_buffering off; location / {   proxy_set_header X-Real-IP $remote_addr;   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;   proxy_set_header X-Forwarded-Proto $scheme;   proxy_set_header Host $http_host;   proxy_connect_timeout 300;   # Default is HTTP/1, keepalive is only enabled in HTTP/1.1   proxy_http_version 1.1;   proxy_set_header Connection "";   chunked_transfer_encoding off;   proxy_pass http://localhost:9000; # If you are using docker-compose this would be the hostname i.e. minio   # Health Check endpoint might go here. See https://www.nginx.com/resources/wiki/modules/healthcheck/   # /minio/health/live; }}

server { listen 80; server_name example.com; # To allow special characters in headers ignore_invalid_headers off; # Allow any size file to be uploaded. # Set to a value such as 1000m; to restrict file size to a specific value client_max_body_size 0; # To disable buffering proxy_buffering off; # Proxy requests to the bucket "photos" to MinIO server running on port 9000 location /photos/ {   proxy_set_header X-Real-IP $remote_addr;   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;   proxy_set_header X-Forwarded-Proto $scheme;   proxy_set_header Host $http_host;   proxy_connect_timeout 300;   # Default is HTTP/1, keepalive is only enabled in HTTP/1.1   proxy_http_version 1.1;   proxy_set_header Connection "";   chunked_transfer_encoding off;   proxy_pass http://localhost:9000; } # Proxy any other request to the application server running on port 9001 location / {   proxy_set_header X-Real-IP $remote_addr;   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;   proxy_set_header X-Forwarded-Proto $scheme;   proxy_set_header Host $http_host;   proxy_connect_timeout 300;   # Default is HTTP/1, keepalive is only enabled in HTTP/1.1   proxy_http_version 1.1;   proxy_set_header Connection "";   chunked_transfer_encoding off;   proxy_pass http://localhost:9001; }

curl  https://get.acme.sh | sh -s email=your_email_adress

source .profile

export DP_Id="xxxxxx"export DP_Key="xxxxxxxxxxxx"

acme.sh --dns dns_dp --issue -d example.com -d *.example.com

acme.sh  --installcert  -d  example.com   \        --key-file   /usr/local/nginx/cert/example.com/privkey.pem \        --fullchain-file /usr/local/nginx/cert/example.com/fullchain.pem

    ssl on;    ssl_certificate  /usr/local/nginx/cert/example.com/fullchain.pem;    ssl_certificate_key /usr/local/nginx/cert/example.com/privkey.pem;    ssl_session_timeout 5m;    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;    ssl_protocols  TLSv1.1 TLSv1.2 TLSv1.3;    ssl_prefer_server_ciphers on;

systemctl restart nginx