S3-kompatiblen Object Storage einrichten: Buckets, Benutzer und Backup

lsblk -o NAME,SIZE,FSTYPE,MOUNTPOINTS,MODEL
sudo smartctl -a /dev/sdb
df -hT
df -i

sudo mkfs.xfs /dev/sdb
sudo mkdir -p /srv/object-data
sudo blkid /dev/sdb
echo "UUID=DISK_UUID /srv/object-data xfs defaults,noatime 0 2" | sudo tee -a /etc/fstab
sudo mount -a
df -hT /srv/object-data

services:
  object-storage:
    image: quay.io/minio/minio:RELEASE_ETIKETI
    restart: unless-stopped
    command: server /data --console-address ":9001"
    environment:
      MINIO_ROOT_USER: ${MINIO_ROOT_USER}
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
    ports:
      - 127.0.0.1:9000:9000
      - 127.0.0.1:9001:9001
    volumes:
      - /srv/object-data:/data

mc alias set eka https://s3.example.com YONETICI_ACCESS_KEY YONETICI_SECRET_KEY
mc admin info eka
mc mb eka/yedekler
mc version enable eka/yedekler

mc admin user add eka yedek-uygulamasi GUCLU_SECRET
mc admin policy create eka sadece-yedek sadece-yedek-policy.json
mc admin policy attach eka sadece-yedek --user yedek-uygulamasi

aws --endpoint-url https://s3.example.com s3api list-buckets
echo "eka-test" > test.txt
aws --endpoint-url https://s3.example.com s3 cp test.txt s3://yedekler/test.txt
aws --endpoint-url https://s3.example.com s3api head-object --bucket yedekler --key test.txt

mc mirror --overwrite eka/yedekler uzak/yedekler
mc stat eka/yedekler/test.txt
sha256sum test.txt

sudo apt update
sudo apt install -y nginx certbot python3-certbot-nginx
sudo tee /etc/nginx/sites-available/s3.example.com > /dev/null <<'NGINX'
server {
    listen 80;
    listen [::]:80;
    server_name s3.example.com;
    client_max_body_size 10G;
    proxy_read_timeout 3600;
    proxy_send_timeout 3600;
    location / {
        proxy_pass http://127.0.0.1:9000;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }
}
NGINX
sudo ln -s /etc/nginx/sites-available/s3.example.com /etc/nginx/sites-enabled/s3.example.com
sudo nginx -t
sudo systemctl reload nginx

sudo certbot --nginx -d s3.example.com --redirect --agree-tos --no-eff-email -m [email protected]
sudo certbot renew --dry-run
curl -I https://s3.example.com
openssl s_client -connect s3.example.com:443 -servername s3.example.com </dev/null 2>/dev/null | openssl x509 -noout -subject -issuer -dates