# https://quay.io/repository/minio/minio?tab=tags

name: minio

secrets:
  minio_root_user:
    file: ${SECRETSDIR}/minio_root_user
  minio_root_password:
    file: ${SECRETSDIR}/minio_root_password

networks:
  traefik-net:
    external: true
   
x-minio-common: &minio-common
  image: quay.io/minio/minio:RELEASE.2024-09-22T00-33-43Z
  user: ${PUID}:${PGID}
  command: server --console-address ":9001" http://minio{1...2}/data{1...2}
  env_file: .minio.env
  secrets:
    - minio_root_user
    - minio_root_password
  restart: unless-stopped
  healthcheck:
    test: ["CMD", "mc", "ready", "local"]
    interval: 5s
    timeout: 5s
    retries: 5

services:
  minio1: 
    <<: *minio-common
    hostname: minio1
    networks:
      - traefik-net
    volumes:
      - "${OBJECTSTOREDIR}/minio/data1-1:/data1"
      - "${OBJECTSTOREDIR}/minio/data1-2:/data2"
    labels:
      - traefik.enable=true
      - traefik.docker.network=traefik-net
      - "traefik.http.services.minio1-svc.loadbalancer.server.port=${WEBUI_PORT}"
      - "traefik.http.middlewares.minio1-https-redirect.redirectscheme.scheme=https"
      - "traefik.http.routers.minio1-rtr.entrypoints=web"
      - "traefik.http.routers.minio1-rtr.rule=Host(`minio1.${DOMAINNAME}`)&& PathPrefix(`/`)"
      - "traefik.http.routers.minio1-rtr.middlewares=minio1-https-redirect"
      - "traefik.http.routers.minio1-rtr.service=minio1-svc"
      - "traefik.http.routers.minio1-secure-rtr.entrypoints=websecure"
      - "traefik.http.routers.minio1-secure-rtr.rule=Host(`minio1.${DOMAINNAME}`)&& PathPrefix(`/`)"
      - "traefik.http.routers.minio1-secure-rtr.tls=true"
      - "traefik.http.routers.minio1-secure-rtr.tls.certresolver=sthomeresolver"
      - "traefik.http.routers.minio1-secure-rtr.service=minio1-svc"
    
  minio2: 
    <<: *minio-common
    hostname: minio2
    networks:
      - traefik-net
    volumes:
      - "${OBJECTSTOREDIR}/minio/data2-1:/data1"
      - "${OBJECTSTOREDIR}/minio/data2-2:/data2"
    labels:
      - traefik.enable=true
      - traefik.docker.network=traefik-net
      - "traefik.http.services.minio2-svc.loadbalancer.server.port=${WEBUI_PORT}"
      - "traefik.http.middlewares.minio2-https-redirect.redirectscheme.scheme=https"
      - "traefik.http.routers.minio2-rtr.entrypoints=web"
      - "traefik.http.routers.minio2-rtr.rule=Host(`minio2.${DOMAINNAME}`)&& PathPrefix(`/`)"
      - "traefik.http.routers.minio2-rtr.middlewares=minio2-https-redirect"
      - "traefik.http.routers.minio2-rtr.service=minio2-svc"
      - "traefik.http.routers.minio2-secure-rtr.entrypoints=websecure"
      - "traefik.http.routers.minio2-secure-rtr.rule=Host(`minio2.${DOMAINNAME}`)&& PathPrefix(`/`)"
      - "traefik.http.routers.minio2-secure-rtr.tls=true"
      - "traefik.http.routers.minio2-secure-rtr.tls.certresolver=sthomeresolver"
      - "traefik.http.routers.minio2-secure-rtr.service=minio2-svc"