Update scripts/start-minio.sh

scripts/start-minio.sh

@@ -48,6 +48,13 @@ http {
   sendfile on;
   client_max_body_size 0;
 
+  # Browser basic auth used for the admin page must not be forwarded to MinIO.
+  # S3 SDK / mc signed requests use AWS4-HMAC-SHA256 and must be preserved.
+  map \$http_authorization \$s3_authorization {
+    default \$http_authorization;
+    ~*^Basic "";
+  }
+
   server {
     listen ${PORT};
     server_name _;
@@ -78,6 +85,7 @@ http {
 
     location /minio/ {
       proxy_set_header Host \$host;
+      proxy_set_header Authorization \$s3_authorization;
       proxy_set_header X-Real-IP \$remote_addr;
       proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
       proxy_set_header X-Forwarded-Proto \$scheme;
@@ -86,6 +94,7 @@ http {
 
     location / {
       proxy_set_header Host \$host;
+      proxy_set_header Authorization \$s3_authorization;
       proxy_set_header X-Real-IP \$remote_addr;
       proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
       proxy_set_header X-Forwarded-Proto \$scheme;