working minio integration

compose.yml

@@ -31,7 +31,8 @@ x-common-env: &common-env
   DRIVE_BASE_URL: "https://${DOMAIN}"
   # Media
   STORAGES_STATICFILES_BACKEND: django.contrib.staticfiles.storage.StaticFilesStorage
-  AWS_S3_ENDPOINT_URL: https://${DOMAIN}/media/
+  AWS_S3_ENDPOINT_URL: http://minio:9000
+  AWS_S3_DOMAIN_REPLACE: https://minio.lasuite-drive.cctest.autonomic.zone
   # AWS_S3_ACCESS_KEY_ID supplied via secret (this is same MINIO_ROOT_USER)
   # AWS_S3_SECRET_ACCESS_KEY supplied via secret (this is same as MINIO_ROOT_PASSWORD)
   MEDIA_BASE_URL: https://${DOMAIN}
@@ -90,6 +91,8 @@ services:
         - "traefik.enable=false"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
         - "coop-cloud.${STACK_NAME}.version=0.2.4+v4.0.0"
+    environment:
+      <<: [ *common-env ]
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8080"]
       interval: 15s
@@ -195,7 +198,7 @@ services:
 
   createbuckets:
 #    image: minio/mc
-    image: minio/minio:RELEASE.2025-05-24T17-08-30Z
+    image: minio/minio:RELEASE.2025-09-07T16-13-09Z
     environment: *minio-env
     entrypoint: >
       sh -c "
@@ -217,7 +220,7 @@ services:
       - backend
 
   minio:
-    image: minio/minio:RELEASE.2025-05-24T17-08-30Z
+    image: minio/minio:RELEASE.2025-09-07T16-13-09Z
     environment: *minio-env
     healthcheck:
       test: ["CMD", "mc", "ready", "local"]
@@ -226,14 +229,15 @@ services:
       retries: 300
     networks:
       - backend
+      - proxy
     command: minio server /data
     entrypoint: ["/usr/bin/docker-entrypoint.sh"]
     volumes:
       - minio:/data
-    deploy:
-      labels:
-        backupbot.backup: "${ENABLE_BACKUPS:-true}"
-        entrypoint: /abra-entrypoint.sh
+#    deploy:
+#      labels:
+#        backupbot.backup: "${ENABLE_BACKUPS:-true}"
+#        entrypoint: /abra-entrypoint.sh
     configs:
       - source: abra_entrypoint
         target: /abra-entrypoint.sh
@@ -241,6 +245,22 @@ services:
     secrets:
       - minio_rp
       - minio_ru
+    deploy:
+      labels:
+        - "traefik.enable=true"
+        - "traefik.docker.network=proxy"
+        - "traefik.http.routers.minio.rule=Host(`${MINIO_DOMAIN}`)"
+        - "traefik.http.routers.minio.entrypoints=web-secure"
+        - "traefik.http.routers.minio.tls=true"
+        - "traefik.http.routers.minio.tls.certresolver=${LETS_ENCRYPT_ENV}"
+        - "traefik.http.services.minio.loadbalancer.server.port=9000"
+        - "traefik.http.middlewares.minio-cors.headers.accessControlAllowOriginList=https://${DOMAIN}"
+        - "traefik.http.middlewares.minio-cors.headers.accessControlAllowMethods=GET,POST,PUT,DELETE,OPTIONS"
+        - "traefik.http.middlewares.minio-cors.headers.accessControlAllowHeaders=*"
+        - "traefik.http.middlewares.minio-cors.headers.accessControlExposeHeaders=ETag,Content-Length"
+        - "traefik.http.middlewares.minio-cors.headers.accessControlMaxAge=600"
+        - "traefik.http.middlewares.minio-cors.headers.addVaryHeader=true"
+        - "traefik.http.routers.minio.middlewares=minio-cors"
 
   web:
     image: nginx:1.25