♻️ minio custom jail

kubernetes/apps/default/cloudnative-pg/cluster/cluster.yaml

@@ -23,7 +23,7 @@ spec:
         compression: bzip2
         maxParallel: 8
       destinationPath: s3://postgresql/
-      endpointURL: https://truenas.${SECRET_DOMAIN}:51515
+      endpointURL: https://.${SECRET_DOMAIN}:9000
       serverName: postgres-v8
       s3Credentials:
         accessKeyId:
@@ -39,7 +39,7 @@ spec:
   #   - name: postgres-v6
   #     barmanObjectStore:
   #       destinationPath: s3://postgresql/
-  #       endpointURL: https://truenas.${SECRET_DOMAIN}:51515
+  #       endpointURL: http://minio.${SECRET_DOMAIN}:9000
   #       s3Credentials:
   #         accessKeyId:
   #           name: postgres-minio

kubernetes/apps/default/hajimari/app/helmrelease.yaml

@@ -67,7 +67,7 @@ spec:
               url: "https://truenas-remote.${SECRET_DOMAIN}"
             - name: minio
               icon: mdi:aws
-              url: "https://minio.${SECRET_DOMAIN}:9000"
+              url: "http://minio.${SECRET_DOMAIN}:9000"
             - name: pikvm
               icon: mdi:ip-network
               url: "https://pikvm.${SECRET_DOMAIN}"

kubernetes/apps/default/homelab/minio/backup/rclone.conf

@@ -3,7 +3,7 @@ type = s3
 provider = Minio
 access_key_id = __RCLONE_ACCESS_ID__
 secret_access_key = __RCLONE_SECRET_KEY__
-endpoint = https://minio.${SECRET_DOMAIN}:51515
+endpoint = http://minio.${SECRET_DOMAIN}:9000
 acl = private
 
 [gdrive-homelab-backups]

kubernetes/apps/default/homelab/opnsense/backup/helmrelease.yaml

@@ -41,7 +41,7 @@ spec:
             command: ["/bin/bash", "/app/opnsense-backup.sh"]
             env:
               OPNSENSE_URL: "https://opnsense.${SECRET_DOMAIN}"
-              S3_URL: "https://truenas.${SECRET_DOMAIN}:51515"
+              S3_URL: "http://minio.${SECRET_DOMAIN}:9000"
             envFrom:
               - secretRef:
                   name: homelab-opnsense-secret

kubernetes/apps/default/homelab/truenas/backup/truenas-backup.sh

@@ -44,7 +44,7 @@ curl -fsSL \
     -H "Date: ${http_request_date}" \
     -H "Content-Type: ${http_content_type}" \
     -H "Authorization: AWS ${AWS_ACCESS_KEY_ID}:${http_signature}" \
-    "https://truenas.${SECRET_DOMAIN}:51515/${http_filepath}"
+    "http://minio.${SECRET_DOMAIN}:9000/${http_filepath}"
 
 rm /tmp/backup-*.tar
 

kubernetes/apps/default/outline/app/helmrelease.yaml

@@ -54,7 +54,7 @@ spec:
               AWS_S3_ACL: private
               AWS_S3_FORCE_PATH_STYLE: "true"
               AWS_S3_UPLOAD_BUCKET_NAME: outline
-              AWS_S3_UPLOAD_BUCKET_URL: "https://truenas.${SECRET_DOMAIN}:51515"
+              AWS_S3_UPLOAD_BUCKET_URL: "http://minio.${SECRET_DOMAIN}:9000"
               ENABLE_UPDATES: "false"
               FILE_STORAGE_UPLOAD_MAX_SIZE: "26214400"
               OIDC_AUTH_URI: "https://auth.${SECRET_CLUSTER_DOMAIN}/api/oidc/authorization"

kubernetes/apps/default/sharry/app/config/sharry.conf

@@ -33,7 +33,7 @@ sharry.restserver {
         minio =
           { enabled = true
             type = "s3"
-            endpoint = "https://truenas.${SECRET_DOMAIN}:51515"
+            endpoint = "http://minio.${SECRET_DOMAIN}:9000"
             access-key = "${SECRET_SHARRY_MINIO_S3_ACCESS_KEY}"
             secret-key = "${SECRET_SHARRY_MINIO_S3_SECRET_KEY}"
             bucket = "sharry"

kubernetes/apps/monitoring/thanos/app/helmrelease.yaml

@@ -35,8 +35,9 @@ spec:
       type: s3
       config:
         bucket: thanos
-        endpoint: "truenas.${SECRET_DOMAIN}:51515"
+        endpoint: "minio.${SECRET_DOMAIN}:9000"
         region: ""
+        insecure: true
     query:
       enabled: true
       replicaCount: 2