Minio Nginx Reverse Proxy for API and Console Access for Subdomain

minio.conf

## API End Point
server
{
	# Listen
	listen 80;
	listen [::]:80;
	listen 443 ssl http2;
	listen [::]:443 ssl http2;

	# Directory & Server Naming
	server_name s3.domain.tld;

	# HTTP to HTTPS redirection
	if ($scheme != "https")
	{
		return 301 https://$host$request_uri;
	}

	# SSL
	ssl_certificate /etc/letsencrypt/live/s3.domain.tld/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/s3.domain.tld/privkey.pem;

	# Disable Hidden FIle Access Except Lets Encrypt Verification
	location ~ /\.well-known 
	{ 
		allow all;
	}

	# Allow special characters in headers
	ignore_invalid_headers off;

	# Allow any size file to be uploaded.
	# Set to a value such as 1000m; to restrict file size to a specific value
	client_max_body_size 0;

	# Disable buffering
	proxy_buffering off;
	proxy_request_buffering off;

	location /
	{
		proxy_set_header Host $http_host;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header X-Forwarded-Proto $scheme;

		proxy_connect_timeout 300;
		# Default is HTTP/1, keepalive is only enabled in HTTP/1.1
		proxy_http_version 1.1;
		proxy_set_header Connection "";
		chunked_transfer_encoding off;
		proxy_pass http://localhost:9000;
	}

	# Nginx Logging
	access_log /var/log/nginx/s3.domain.tld-access.log;
	error_log /var/log/nginx/s3.domain.tld-error.log warn;
}

###################### Console ######################

server
{
	# Listen
	listen 80;
	listen [::]:80;
	listen 443 ssl http2;
	listen [::]:443 ssl http2;

	# Directory & Server Naming
	server_name minio.domain.tld;

	# HTTP to HTTPS redirection
	if ($scheme != "https")
	{
		return 301 https://$host$request_uri;
	}

	# SSL
	ssl_certificate /etc/letsencrypt/live/minio.domain.tld/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/minio.domain.tld/privkey.pem;

	# Disable Hidden FIle Access Except Lets Encrypt Verification
	location ~ /\.well-known 
	{ 
		allow all;
	}

	# Allow special characters in headers
	ignore_invalid_headers off;

	# Allow any size file to be uploaded.
	# Set to a value such as 1000m; to restrict file size to a specific value
	client_max_body_size 0;

	# Disable buffering
	proxy_buffering off;
	proxy_request_buffering off;

	location /
	{
		proxy_set_header Host $http_host;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header X-Forwarded-Proto $scheme;
		proxy_set_header X-NginX-Proxy true;
		proxy_connect_timeout 300;

		# To support websocket
		proxy_http_version 1.1;
		proxy_set_header Upgrade $http_upgrade;
		proxy_set_header Connection "upgrade";

		chunked_transfer_encoding off;
		proxy_pass http://localhost:9090;
	}

	# Nginx Logging
	access_log /var/log/nginx/minio.domain.tld-access.log;
	error_log /var/log/nginx/minio.domain.tld-error.log warn;
}