Run Minio on Dokku
What is Minio?
Minio is an object storage server, and API compatible with Amazon S3 cloud storage service. Read more at the minio.io website.
What is Dokku?
Dokku is the smallest PaaS implementation you've ever seen - Docker powered mini-Heroku.
Requirements
- A working Dokku host
Setup
Note: We are going to use the domain minio.example.com
for demonstration
purposes. Make sure to replace it to your domain name.
Create the app
Log onto your Dokku Host to create the Minio app:
dokku apps:create minio
Configuration
Setting access keys
Minio uses two access keys (ACCESS_KEY
and SECRET_KEY
) for authentication
and object management. The following commands sets a random strings for each
access key.
dokku config:set minio MINIO_ACCESS_KEY=$(echo `openssl rand -base64 45` | tr -d \=+ | cut -c 1-20)
dokku config:set minio MINIO_SECRET_KEY=$(echo `openssl rand -base64 45` | tr -d \=+ | cut -c 1-32)
To login in the browser or via API, you will need to supply both the
ACCESS_KEY
and SECRET_KEY
. You can retrieve these at any time while logged
in on your host running dokku via dokku config minio
.
Note: If you do not set these keys, Minio will generate them during startup
and output them to the log (check if via dokku logs minio
). You will still
need to set them manually.
Persistent storage
To persists uploaded data between restarts, we create a folder on the host
machine, add write permissions to the user defined in Dockerfile
and tell
Dokku to mount it to the app container.
sudo mkdir -p /var/lib/dokku/data/storage/minio/data
sudo mkdir -p /var/lib/dokku/data/storage/minio/config
sudo chown -R 32767:32767 /var/lib/dokku/data/storage/minio
dokku storage:mount minio /var/lib/dokku/data/storage/minio/data:/home/dokku/data
dokku storage:mount minio /var/lib/dokku/data/storage/minio/config:/home/dokku/.minio
More information on Persistent Storage in Dokku is available on the Dokku documentation
Domain setup
To get the routing working, we need to apply a few settings. First we set the domain.
dokku domains:set minio minio.example.com
The parent Dockerfile, provided by the Minio
project, exposes port 9000
for web requests.
Dokku will set up this port for outside communication, as explained in its
documentation.
Because we want Minio to be available on the default port 80
(or 443
for
SSL), we need to fiddle around with the proxy settings.
First add the correct port mapping for this project as defined in the parent
Dockerfile
.
dokku proxy:ports-add minio http:80:9000
If you also need SSL support:
dokku proxy:ports-add minio https:443:9000
Next remove the proxy mapping added by Dokku.
dokku proxy:ports-remove minio http:80:5000
Push Minio to Dokku
Grabbing the repository
First clone this repository onto your machine.
Via SSH
git clone git@github.com:slypix/minio-dokku.git
Via HTTPS
git clone https://github.com/slypix/minio-dokku.git
Set up git remote
Now you need to set up your Dokku server as a remote.
git remote add dokku dokku@example.com:minio
Push Minio
Now we can push Minio to Dokku (before moving on to the next part).
git push dokku master
SSL certificate
Last but not least, we can go an grab the SSL certificate from Let's Encrypt.
dokku config:set --no-restart minio DOKKU_LETSENCRYPT_EMAIL=you@example.com
dokku letsencrypt minio
Disabling Web UI
In certain cases, you may not want to expose the web UI (browser) for minio. This can easily be done by adding an environment variable MINIO_BROWSER
to off
.
dokku config:set minio MINIO_BROWSER=off
Wrapping up
Your Minio instance should now be available on https://minio.example.com
.