+s3 @m3-atlas

hosts/m3-atlas/secrets.nix

@@ -10,6 +10,9 @@
       littlelink-m3tam3re = {
         file = ../../secrets/littlelink-m3tam3re.age;
       };
+      minio-root-cred = {
+        file = ../../secrets/minio-root-cred.age;
+      };
       restreamer-env = {
         file = ../../secrets/restreamer-env.age;
       };

hosts/m3-atlas/services/default.nix

@@ -2,6 +2,7 @@
   imports = [
     ./containers
     ./gitea.nix
+    ./minio.nix
     ./mysql.nix
     ./postgres.nix
     ./searx.nix

hosts/m3-atlas/services/minio.nix

@@ -0,0 +1,41 @@
+{config, ...}: {
+  services.minio = {
+    enable = true;
+    region = "eu-central-1";
+    consoleAddress = ":3007";
+    listenAddress = ":3008";
+    browser = true;
+    rootCredentialsFile = config.age.secrets.minio-root-cred.path;
+    dataDir = ["/var/storage/s3"];
+  };
+  # Traefik configuration specific to minio
+  services.traefik.dynamicConfigOptions.http = {
+    services.minio-console.loadBalancer.servers = [
+      {
+        url = "http://localhost:3007/";
+      }
+    ];
+    services.minio.loadBalancer.servers = [
+      {
+        url = "http://localhost:3008/";
+      }
+    ];
+
+    routers.minio = {
+      rule = "Host(`s3.m3tam3re.com`)";
+      tls = {
+        certResolver = "godaddy";
+      };
+      service = "minio";
+      entrypoints = "websecure";
+    };
+    routers.minio-console = {
+      rule = "Host(`minio.m3tam3re.com`)";
+      tls = {
+        certResolver = "godaddy";
+      };
+      service = "minio-console";
+      entrypoints = "websecure";
+    };
+  };
+}