I use nginx to redirect easy to remember domains to services on the raspberry pi, for example filebrowser.rpi4.home.local, gitea.rpi4.home.local, nextcloud.rpi4.home.local, etc. I also have a self-signed certificate for the *.rpi4.home.local and rpi4.home.local names, which I use on all these services to set up an https connection. A typical configuration block might look like:
server {
server_name gitea.rpi4.home.local;
location / {
proxy_pass http://127.0.0.1:3000;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
listen [::]:443 ssl;
listen 443 ssl;
include snippets/self-signed.conf;
}
I have to modify this a bit depending on how the service is typically accessed; e.g. for nextcloud it looks a bit different.
I’m trying to do a similar thing for minio, but run into the issue that accessing the service on port 9000 actually redirects to some random port >30000 after a 307 internal redirect. The 307 redirect actually brings me back to using http. I’ve tried using this “real” port in the nginx configuration for proxy_pass instead of 9000 which works to keep my https connection. However it seems this port changes periodically so the configuration stops working after a while.
Is there a way to set up nginx so that I can access minio through https with minio.rpi4.home.local, i.e. deal with the 307 redirect? I’ve looked into this obcure post: How to make Nginx redirect 301 302 307 to new URL on same server - Server Fault and tried something similar myself:
server {
server_name minio.rpi4.home.local;
listen [::]:443 ssl;
listen 443 ssl;
include snippets/self-signed.conf;
location / {
proxy_pass http://127.0.0.1:9000;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_intercept_errors on;
error_page 301 302 307 = @handle_redirects;
}
location @handle_redirects {
set $minio_port 38991;
proxy_pass http://127.0.0.1:$minio_port;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Proto https;
}
}
Then the idea would be to try to capture the port from the Location header somehow in the first request and use it in the handle_redirect but I haven’t figured out how to do that yet. Still, just hardcoding the current port doesn’t work and I get a black page with some broken links. If I check the console, a bunch of 403 errors.
Anyways, any ideas on what could be done? Maybe there is just a way to fix the port for the minio web page? Thanks in advance.
