+ minio

hosts/lkk-nix-1/default.nix

@@ -35,7 +35,6 @@
       billbee-api-key = {
         file = ../../secrets/billbee-api-key.age;
         mode = "770";
-        owner = "n8n";
       };
 
       traefik-env = {
@@ -47,7 +46,6 @@
       minio-root-cred = {
         file = ../../secrets/minio-root-cred.age;
         mode = "770";
-        owner = "minio";
       };
 
       searx-environmentFile = {

hosts/lkk-nix-1/services/default.nix

@@ -5,6 +5,7 @@
     ./gitea.nix
     ./invidious.nix
     ./mariadb.nix
+    ./minio.nix
     ./n8n.nix
     ./postgres.nix
     ./searx.nix

hosts/lkk-nix-1/services/gitea.nix

@@ -4,6 +4,7 @@
     enable = true;
     package = pkgs.unstable.gitea;
     rootUrl = "https://code.lanakk.com";
+    lfs.enable = true;
     dump = {
       enable = true;
       interval = "03:30:00";

hosts/lkk-nix-1/services/minio.nix

@@ -3,6 +3,8 @@
   services.minio = {
     enable = true;
     region = "eu-central-1";
+    consoleAddress = ":9001";
+    browser = true;
     rootCredentialsFile = config.age.secrets.minio-root-cred.path;
     dataDir = [ "/var/backup/s3" ];
   };

hosts/lkk-nix-1/services/traefik.nix

@@ -83,6 +83,8 @@
             [{ url = "http://localhost:8384/"; }];
           minio.loadBalancer.servers =
             [{ url = "http://localhost:9000/"; }];
+          minio-console.loadBalancer.servers =
+            [{ url = "http://localhost:9001/"; }];
         };
         routers = {
           api = {
@@ -149,7 +151,16 @@
               certResolver = "godaddy";
               domains = "s3.lanakk.com";
             };
-            service = "matomo";
+            service = "minio";
+            entrypoints = "websecure";
+          };
+          minio-console = {
+            rule = "Host(`minio.lanakk.com`)";
+            tls = {
+              certResolver = "godaddy";
+              domains = "minio.lanakk.com";
+            };
+            service = "minio-console";
             entrypoints = "websecure";
           };
           searx = {