include:

  {% if salt['grains.get']('include_secrets', True) %}

  - secrets.role.minio

  {% endif %}

  - role.common.nginx

nginx:

  ng:

    servers:

      managed:

        s3.opensuse-project.net:

          config:

            - upstream minio:

                - server: 127.0.0.1:9000 fail_timeout=0

            - server:

                - server_name: s3.opensuse-project.net

                - listen:

                    - 80

                    - default_server

                - location /:

                    - try_files: $uri @minio

                - location @minio:

                    - proxy_set_header: X-Forwarded-For $proxy_add_x_forwarded_for

                    - proxy_set_header: X-Forwarded-Proto https

                    - proxy_set_header: X-Forwarded-Protocol ssl

                    - proxy_set_header: Host $http_host

                    - proxy_redirect: "off"

                    - client_max_body_size: 2M

                    - proxy_pass: http://minio

          enabled: True

zypper:

  repositories:

    server:database:

      baseurl: http://download.opensuse.org/repositories/server:/database/$releasever/

      priority: 100

      refresh: True