all-project/docs/部署文档/生产环境双机部署方案/配置文件/nginx-minio-cluster.conf

# MinIO集群负载均衡配置
# 适用于67/68双机MinIO集群
# 部署位置: /etc/nginx/conf.d/minio-cluster.conf

# MinIO API负载均衡（9000端口）
upstream minio_api {
    # 67机器节点
    server 172.16.0.67:9000 weight=1 max_fails=3 fail_timeout=30s;
    # 68机器节点
    server 172.16.0.68:9000 weight=1 max_fails=3 fail_timeout=30s;
    
    # 连接复用
    keepalive 32;
}

# MinIO控制台负载均衡（9001端口）
upstream minio_console {
    # 67机器控制台
    server 172.16.0.67:9001 weight=1 max_fails=3 fail_timeout=30s;
    # 68机器控制台
    server 172.16.0.68:9001 weight=1 max_fails=3 fail_timeout=30s;
    
    # 连接复用
    keepalive 32;
}

# MinIO API服务（9000端口）
server {
    listen 9000;
    server_name _;  # 可以修改为实际域名
    
    # 访问日志
    access_log /var/log/nginx/minio-api-access.log;
    error_log /var/log/nginx/minio-api-error.log;
    
    # 客户端请求体大小限制（大文件上传）
    client_max_body_size 10G;
    
    # 超时设置（大文件上传需要较长超时）
    proxy_connect_timeout 300s;
    proxy_send_timeout 300s;
    proxy_read_timeout 300s;
    
    # 代理配置
    location / {
        proxy_pass http://minio_api;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        # WebSocket支持（MinIO控制台需要）
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        
        # 缓冲设置（大文件上传必须关闭缓冲）
        proxy_buffering off;
        proxy_request_buffering off;
        
        # 错误处理
        proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
        proxy_next_upstream_tries 3;
        proxy_next_upstream_timeout 10s;
    }
    
    # 健康检查端点
    location /minio/health/live {
        proxy_pass http://minio_api;
        access_log off;
    }
}

# MinIO控制台服务（9001端口）
server {
    listen 9001;
    server_name _;  # 可以修改为实际域名
    
    # 访问日志
    access_log /var/log/nginx/minio-console-access.log;
    error_log /var/log/nginx/minio-console-error.log;
    
    # 可选：IP白名单（限制控制台访问）
    # allow 172.16.0.0/16;
    # allow 127.0.0.1;
    # deny all;
    
    # 代理配置
    location / {
        proxy_pass http://minio_console;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        
        # WebSocket支持（控制台必需）
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        
        # 超时设置
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;
        
        # 缓冲设置
        proxy_buffering off;
    }
}