{
  "version": "10",
  "aliases": {
    "minio": {
      "url": "https://s3.<domain>",
      "accessKey": "<access-key>",
      "secretKey": "<secret-key>",
      "api": "S3v4",
      "path": "auto"
    }
  }
}

Create the truenas user and password

mc admin user add minio truenas <super-secret-password>

Create the truenas bucket
```
mc mb minio/truenas
```

Create truenas-user-policy.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "s3:ListBucket",
        "s3:PutObject",
        "s3:GetObject",
        "s3:DeleteObject"
      ],
      "Effect": "Allow",
      "Resource": ["arn:aws:s3:::truenas/*", "arn:aws:s3:::truenas"],
      "Sid": ""
    }
  ]
}

Apply the bucket policies

mc admin policy add minio truenas-private truenas-user-policy.json

Associate private policy with the user

mc admin policy set minio truenas-private user=truenas

Create a retention policy

mc ilm add minio/truenas --expire-days "90"

minio-rclone S3 Configuration

Create ~/.mc/config.json

{
  "version": "10",
  "aliases": {
    "minio": {
      "url": "https://s3.<domain>",
      "accessKey": "<access-key>",
      "secretKey": "<secret-key>",
      "api": "S3v4",
      "path": "auto"
    }
  }
}

Create the rclone user and password

mc admin user add minio rclone <super-secret-password>

Create rclone-user-policy.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "s3:ListBucket",
        "s3:GetObject"
      ],
      "Effect": "Allow",
      "Resource": ["arn:aws:s3:::opnsense/*", "arn:aws:s3:::opnsense","arn:aws:s3:::truenas/*", "arn:aws:s3:::truenas"],
      "Sid": ""
    }
  ]
}

Apply the bucket policies

mc admin policy add minio rclone-private rclone-user-policy.json

Associate private policy with the user

mc admin policy set minio rclone-private user=rclone