After setting environment variable "MINIO_SERVER_URL", some interface errors occur.

[kukume]

Expected Behavior

The interface does not report errors and can preview and download files normally.

Current Behavior

After setting environment variable "MINIO_SERVER_URL",
interface:/api/v1/buckets/kuku/objects/metadata?prefix=NDUyNzg4MTAuanBn,
responed:

interface: /api/v1/buckets/kuku/objects/download?prefix=NDUyNzg4MTAuanBn&version_id=null
responed code : 403 ,no information in the response body

Possible Solution

i don't know

Steps to Reproduce (for bugs)

1. setting environment variable "MINIO_SERVER_URL"
2. Create a bucket and upload the file, then view the file
3. Found it impossible to download images and preview images
4. Unable to download files and preview files

Context

I can't download and preview the file

Your Environment

• Version used (minio --version): minio version RELEASE.2022-06-17T02-00-35Z
• Server setup and configuration:

export MINIO_ROOT_USER="xx"
export MINIO_ROOT_PASSWORD="xx"
export MINIO_BROWSER_REDIRECT_URL="https://xx.com"
export MINIO_SERVER_URL="https://minio.xx.com"
./minio server /data/wwwroot/minio.xx.com/data --console-address ":9001"

• Operating System and version (uname -a): Linux v2202111150657169024 5.10.0-9-amd64 Full restructure in accordance with minio#1 SMP Debian 5.10.70-1 (2021-09-30) x86_64 GNU/Linux

[vadmeste]

export MINIO_SERVER_URL="https://minio.xx.com"

You might need to add ':9000'

[kukume]

My domain name is a reverse proxy of nginx, set up in accordance with the documentation

[vadmeste]

Did you try 'mc' with your load balancer address ? is it doing what you are trying to do with Console UI ?

[kukume]

I only runmc alias set myminio, I don't understand the other commands of mc

[harshavardhana]

@kukume what is the user used to login?

[harshavardhana]

export MINIO_ROOT_USER="xx"
export MINIO_ROOT_PASSWORD="xx"
export MINIO_BROWSER_REDIRECT_URL="https://xx.com"
export MINIO_SERVER_URL="https://minio.xx.com"
./minio server /data/wwwroot/minio.xx.com/data --console-address ":9001"

Please share your nginx config.

[kukume]

login withexport MINIO_ROOT_USER
nginx config:

server {
  listen 80;
  listen [::]:80;
  listen 443 ssl http2;
  listen [::]:443 ssl http2;
  ssl_certificate /usr/local/nginx/conf/ssl/minio.xx.me.crt;
  ssl_certificate_key /usr/local/nginx/conf/ssl/minio.xx.me.key;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
  ssl_ciphers TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
  ssl_prefer_server_ciphers on;
  ssl_session_timeout 10m;
  ssl_session_cache builtin:1000 shared:SSL:10m;
  ssl_buffer_size 1400;
  add_header Strict-Transport-Security max-age=15768000;
  ssl_stapling on;
  ssl_stapling_verify on;
  server_name minio.xx.me;
  access_log off;
  index index.html index.htm index.php;
  root /data/wwwroot/minio.xx.me;
  if ($ssl_protocol = "") { return 301 https://$host$request_uri; }
  
  ignore_invalid_headers off;
  client_max_body_size 1000m;
  proxy_buffering off;
  
  include /usr/local/nginx/conf/rewrite/minio.conf;
  #error_page 404 /404.html;
  #error_page 502 /502.html;
  
  location ~ [^/]\.php(/|$) {
    #fastcgi_pass remote_php_ip:9000;
    fastcgi_pass unix:/dev/shm/php-cgi.sock;
    fastcgi_index index.php;
    include fastcgi.conf;
  }
  location /.well-known {
    allow all;
  }
}

/usr/local/nginx/conf/rewrite/minio.conf:

location / {
   proxy_set_header X-Real-IP $remote_addr;
   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
   proxy_set_header X-Forwarded-Proto $scheme;
   proxy_set_header Host $http_host;

   proxy_connect_timeout 300;
   # Default is HTTP/1, keepalive is only enabled in HTTP/1.1
   proxy_http_version 1.1;
   proxy_set_header Connection "";
   chunked_transfer_encoding off;

   proxy_pass http://localhost:9000; # If you are using docker-compose this would be the hostname i.e. minio
   # Health Check endpoint might go here. See https://www.nginx.com/resources/wiki/modules/healthcheck/
   # /minio/health/live;
 }

[jbenguira]

I have the exact same issue, if I don't set the env var MINIO_SERVER_URL, preview & download are working, but sharing url is showing the local ip of the container. If I set MINIO_SERVER_URL to the correct url with port, sharing is working perfectly but preview/download are not working anymore

[bexsoft]

Hi!

We've tried to reproduce the issue using the following NGINX configuration:

events { worker_connections 1024; }

http {

server {
    listen 80;
    server_name minio.localhost;

    location / {
   proxy_set_header X-Real-IP $remote_addr;
   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
   proxy_set_header X-Forwarded-Proto $scheme;
   proxy_set_header Host $http_host;

   proxy_connect_timeout 300;
   # Default is HTTP/1, keepalive is only enabled in HTTP/1.1
   proxy_http_version 1.1;
   proxy_set_header Connection "";
   chunked_transfer_encoding off;

   proxy_pass http://localhost:9000; # If you are using docker-compose this would be the hostname i.e. minio
   # Health Check endpoint might go here. See https://www.nginx.com/resources/wiki/modules/healthcheck/
   # /minio/health/live;
 }

    client_max_body_size 0;
}

server {
    listen 80;
    server_name console.localhost;

    location / {
   proxy_set_header X-Real-IP $remote_addr;
   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
   proxy_set_header X-Forwarded-Proto $scheme;
   proxy_set_header Host $http_host;

   proxy_connect_timeout 300;
   # Default is HTTP/1, keepalive is only enabled in HTTP/1.1
   proxy_http_version 1.1;
   proxy_set_header Connection "";
   chunked_transfer_encoding off;

   proxy_pass http://localhost:9001; # If you are using docker-compose this would be the hostname i.e. minio
   # Health Check endpoint might go here. See https://www.nginx.com/resources/wiki/modules/healthcheck/
   # /minio/health/live;
 }

    client_max_body_size 0;
}


} 

and browsing into the objects list as well as preview / download the files was possible.

I see in your NGINX configuration that you are not setting a directive to access console. The root cause could be related to this as both directives are required.

The following command was used to start MinIO: MINIO_ROOT_USER=minio MINIO_ROOT_PASSWORD=minio123 MINIO_BROWSER_REDIRECT_URL=http://console.localhost MINIO_SERVER_URL=http://minio.localhost minio server ~/dat2{1...4} --console-address ":9001"

Could you please help us to verify your configuration with these steps and see if it solves your problem?

Thank you.

[kukume]

My nginx config：
minio:

server {
	listen 443 ssl http2 ; #listen end
	server_name minio.localhost; #server_name end
	index index.html index.htm index.php; #index end


	location / {
		default_type text/html;
		subs_filter_types text/css text/xml; #subs_filtert end
		proxy_set_header X-Real-IP  $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header Referer $http_referer; #header_referer end
		proxy_set_header Host $host; #header_host end
		proxy_pass http://localhost:9000; #proxy_pass end
		proxy_set_header Accept-Encoding "";
		
		proxy_set_header X-Forwarded-Proto $scheme;
	    proxy_connect_timeout 300;
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        chunked_transfer_encoding off;
	}
	
	client_max_body_size 0;

	access_log off; #access_log end
	error_log /dev/null; #error_log end
}

console:

server {
	listen 443 ssl http2 ; #listen end
	server_name console.minio.localhost; #server_name end


	location / {
		default_type text/html;
		subs_filter_types text/css text/xml; #subs_filtert end
		proxy_set_header X-Real-IP  $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header Referer $http_referer; #header_referer end
		proxy_set_header Host $host; #header_host end
		proxy_pass http://localhost:9001; #proxy_pass end
		proxy_set_header Accept-Encoding "";
		
		proxy_set_header X-Forwarded-Proto $scheme;
	    proxy_connect_timeout 300;
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        chunked_transfer_encoding off;
	}

    client_max_body_size 0;
}

start MinIO：

MINIO_ROOT_USER=minio MINIO_ROOT_PASSWORD=minio123 MINIO_BROWSER_REDIRECT_URL=https://console.minio.localhost MINIO_SERVER_URL=https://minio.localhost minio server ./data --console-address ":9001"

Still can't download and preview

[bexsoft]

My nginx config： minio:

server {
	listen 443 ssl http2 ; #listen end
	server_name minio.localhost; #server_name end
	index index.html index.htm index.php; #index end


	location / {
		default_type text/html;
		subs_filter_types text/css text/xml; #subs_filtert end
		proxy_set_header X-Real-IP  $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header Referer $http_referer; #header_referer end
		proxy_set_header Host $host; #header_host end
		proxy_pass http://localhost:9000; #proxy_pass end
		proxy_set_header Accept-Encoding "";
		
		proxy_set_header X-Forwarded-Proto $scheme;
	    proxy_connect_timeout 300;
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        chunked_transfer_encoding off;
	}
	
	client_max_body_size 0;

	access_log off; #access_log end
	error_log /dev/null; #error_log end
}

console:

server {
	listen 443 ssl http2 ; #listen end
	server_name console.minio.localhost; #server_name end


	location / {
		default_type text/html;
		subs_filter_types text/css text/xml; #subs_filtert end
		proxy_set_header X-Real-IP  $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header Referer $http_referer; #header_referer end
		proxy_set_header Host $host; #header_host end
		proxy_pass http://localhost:9001; #proxy_pass end
		proxy_set_header Accept-Encoding "";
		
		proxy_set_header X-Forwarded-Proto $scheme;
	    proxy_connect_timeout 300;
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        chunked_transfer_encoding off;
	}

    client_max_body_size 0;
}

start MinIO：

MINIO_ROOT_USER=minio MINIO_ROOT_PASSWORD=minio123 MINIO_BROWSER_REDIRECT_URL=https://console.minio.localhost MINIO_SERVER_URL=https://minio.localhost minio server ./data --console-address ":9001"

Still can't download and preview

Hi!

Could you please try using the latest version of MinIO? We tested using RELEASE.2022-07-04T21-02-54Z. Thank you!