From fa64e1863acd9743f13af7b31594287646b91c5e Mon Sep 17 00:00:00 2001 From: hailin Date: Sat, 7 Mar 2026 01:20:08 -0800 Subject: [PATCH] fix(admin-service): use internal IP for MinIO to avoid hairpin NAT admin-service runs on 192.168.1.222 (LAN). Connecting to MinIO via public IP 154.84.135.121 fails with ETIMEDOUT (hairpin NAT). Use internal gateway IP 192.168.1.200:9100 (no SSL) for S3 API calls. Public download URLs still use https://oss.gogenex.com. Co-Authored-By: Claude Sonnet 4.6 --- backend/docker-compose.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/backend/docker-compose.yml b/backend/docker-compose.yml index 3388b2d..d3a8405 100644 --- a/backend/docker-compose.yml +++ b/backend/docker-compose.yml @@ -353,9 +353,9 @@ services: - DB_USERNAME=genex - DB_PASSWORD=${DB_PASSWORD} - DB_NAME=genex - - MINIO_ENDPOINT=oss.gogenex.com # Object storage — https://oss.gogenex.com (gateway server) - - MINIO_PORT=443 - - MINIO_USE_SSL=true + - MINIO_ENDPOINT=192.168.1.200 # MinIO on gateway server — internal IP (hairpin NAT: public IP unreachable from LAN) + - MINIO_PORT=9100 + - MINIO_USE_SSL=false - MINIO_ACCESS_KEY=genex-admin - MINIO_SECRET_KEY=genex-minio-secret - MINIO_BUCKET=app-releases