Minio

Minio设计Nginx反向代理时，注意应拦截public目录，否则如下图，可以查看所有文件信息。

Nginx配置示例

# 精确匹配：拒绝访问 /resource/public 或 /resource/public/ 防止Minio图片遍历获取
location = /resource/public {
    return 403;
}
location = /resource/public/ {
    return 403;
}

location /resource {
  rewrite  ^.+resource/?(.*)$ /$1 break;
  include  uwsgi_params;
  proxy_pass   http://localhost:9000;
  add_header Accept-Ranges bytes;
}