f1fd11c031
Use V4 ('s3v4') signature version for for all presigning URLs to support
backblaze, fixes #2472
- add 'access_addressing_style' to be able to choose virtual/path
addressing for access endpoint (default to 'virtual' as before)
- fix minio presigning with v4 by using 'path' addressing style for
minio
- if path matches '/data/' for internal minio bucket, then always use
'path'
- also make minio access path '/data/' configurable
also simplify running in any namespace with default settings:
- don't hardcode 'local-minio.default'
- in crawlers namespace, add a 'local-minio' externalName service which
maps to the main namespace service.
30 lines
1.2 KiB
Bash
Executable File
30 lines
1.2 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
# remove old config
|
|
rm /etc/nginx/conf.d/default.conf
|
|
|
|
if [ -z "$LOCAL_MINIO_HOST" ]; then
|
|
echo "no local minio, clearing out minio route"
|
|
echo "" >/etc/nginx/includes/minio.conf
|
|
else
|
|
LOCAL_ACCESS_PATH=$(printf '%s\n' "$LOCAL_ACCESS_PATH" | sed -e 's/[\/&]/\\&/g')
|
|
echo "local minio: replacing \$LOCAL_MINIO_HOST with \"$LOCAL_MINIO_HOST\", \$LOCAL_BUCKET with \"$LOCAL_BUCKET\", \$LOCAL_ACCESS_PATH with \"$LOCAL_ACCESS_PATH\""
|
|
sed -i "s/\$LOCAL_ACCESS_PATH/$LOCAL_ACCESS_PATH/g" /etc/nginx/includes/minio.conf
|
|
sed -i "s/\$LOCAL_MINIO_HOST/$LOCAL_MINIO_HOST/g" /etc/nginx/includes/minio.conf
|
|
sed -i "s/\$LOCAL_BUCKET/$LOCAL_BUCKET/g" /etc/nginx/includes/minio.conf
|
|
fi
|
|
|
|
# Add analytics script, if provided
|
|
if [ -z "$INJECT_EXTRA" ]; then
|
|
echo "analytics disabled, injecting blank script"
|
|
echo "" >/usr/share/nginx/html/extra.js
|
|
else
|
|
echo "analytics enabled, injecting script"
|
|
echo "$INJECT_EXTRA" >/usr/share/nginx/html/extra.js
|
|
fi
|
|
|
|
mkdir -p /etc/nginx/resolvers/
|
|
echo resolver $(grep -oP '(?<=nameserver\s)[^\s]+' /etc/resolv.conf | awk '{ if ($1 ~ /:/) { printf "[" $1 "] "; } else { printf $1 " "; } }') valid=10s ipv6=off";" >/etc/nginx/resolvers/resolvers.conf
|
|
|
|
cat /etc/nginx/resolvers/resolvers.conf
|