{"id":1879,"date":"2026-09-05T09:36:19","date_gmt":"2026-09-05T04:06:19","guid":{"rendered":"https:\/\/cpanelfree.com\/blog\/how-to-setup-minio-s3-compatible-object-storage-vps\/"},"modified":"2026-09-05T12:58:55","modified_gmt":"2026-09-05T07:28:55","slug":"how-to-setup-minio-s3-compatible-object-storage-vps","status":"publish","type":"post","link":"https:\/\/cpanelfree.com\/blog\/how-to-setup-minio-s3-compatible-object-storage-vps\/","title":{"rendered":"How to Set Up MinIO S3-Compatible Object Storage on Ubuntu VPS with TLS"},"content":{"rendered":"

Why Self-Host S3-Compatible Storage with MinIO?<\/h2>\n

Modern cloud-native applications decouple compute from file storage. Storing user media uploads, PDF documents, database backups, and machine learning models in AWS S3 or Google Cloud Storage is standard practice. However, enterprise cloud providers charge steep monthly storage rates ($0.023\/GB) and aggressive egress bandwidth fees ($0.09\/GB) that quickly become exorbitant for media-heavy platforms.<\/p>\n

MinIO<\/strong> is a high-performance, open-source S3-compatible object storage server written in Go. Capable of saturating 10GbE network interfaces with read\/write throughput exceeding 10 GB\/sec, self-hosting MinIO on an NVMe Cloud VPS provides 100% S3 API compatibility with existing SDKs (AWS SDK, Boto3, Strapi, Next.js) at zero egress bandwidth costs.<\/p>\n

In this technical implementation guide, we will install MinIO as a systemd service on Ubuntu 24.04\/22.04 LTS, secure storage with Let’s Encrypt TLS certificates, configure the MinIO Web Console, and manage buckets with the MinIO Client (mc<\/code>) utility.<\/p>\n

Step 1: Installing MinIO Server Binary on Ubuntu VPS<\/h2>\n

Download the official pre-compiled Linux deb package for MinIO:<\/p>\n

# Download latest MinIO Debian package\ncd \/tmp\nwget https:\/\/dl.min.io\/server\/minio\/release\/linux-amd64\/archive\/minio_20240803043323.0.0_amd64.deb\n\n# Install package\nsudo dpkg -i minio_20240803043323.0.0_amd64.deb\n\n# Verify installation\nminio --version<\/code><\/pre>\n
Step 2: Creating Dedicated User & Data Storage Directory<\/h2>\n
# Create system user and group\nsudo useradd -r minio-user -s \/sbin\/nologin\nsudo groupadd minio-user\n\n# Create persistent storage directories\nsudo mkdir -p \/mnt\/data \/etc\/minio\nsudo chown -R minio-user:minio-user \/mnt\/data \/etc\/minio<\/code><\/pre>\n
Step 3: Configuring MinIO Environment Variables<\/h2>\n
Create the configuration file at \/etc\/default\/minio<\/code> with strong cryptographic credentials:<\/p>\n
# Storage Volume Path\nMINIO_VOLUMES=\"\/mnt\/data\"\n\n# API and Web Console Listening Addresses\nMINIO_OPTS=\"--address 127.0.0.1:9000 --console-address 127.0.0.1:9001\"\n\n# Root Administrator Credentials (Minimum 8 chars)\nMINIO_ROOT_USER=\"minio_admin_user\"\nMINIO_ROOT_PASSWORD=\"UltraSecureMinioPassword2026!\"\n\n# Public Base Server URL\nMINIO_SERVER_URL=\"https:\/\/s3.example.com\"\nMINIO_BROWSER_REDIRECT_URL=\"https:\/\/console-s3.example.com\"<\/code><\/pre>\n
Enable and start the MinIO systemd service:<\/p>\n
sudo systemctl enable --now minio\nsudo systemctl status minio --no-pager<\/code><\/pre>\n
Step 4: Nginx Reverse Proxy with TLS for S3 API & Web Console<\/h2>\n
Create \/etc\/nginx\/sites-available\/minio.conf<\/code> to route API traffic and Console management:<\/p>\n
# 1. MinIO S3 API Endpoint (s3.example.com)\nserver {\n    listen 80;\n    server_name s3.example.com;\n    client_max_body_size 1000M;\n\n    location \/ {\n        proxy_pass http:\/\/127.0.0.1:9000;\n        proxy_set_header Host $http_host;\n        proxy_set_header X-Real-IP $remote_addr;\n        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n        proxy_set_header X-Forwarded-Proto $scheme;\n        proxy_connect_timeout 300;\n        proxy_http_version 1.1;\n        chunked_transfer_encoding off;\n    }\n}\n\n# 2. MinIO Web Console GUI (console-s3.example.com)\nserver {\n    listen 80;\n    server_name console-s3.example.com;\n\n    location \/ {\n        proxy_pass http:\/\/127.0.0.1:9001;\n        proxy_http_version 1.1;\n        proxy_set_header Upgrade $http_upgrade;\n        proxy_set_header Connection \"upgrade\";\n        proxy_set_header Host $http_host;\n        proxy_set_header X-Real-IP $remote_addr;\n        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n        proxy_set_header X-Forwarded-Proto $scheme;\n    }\n}<\/code><\/pre>\n
Enable the site and issue SSL certificates:<\/p>\n
sudo ln -s \/etc\/nginx\/sites-available\/minio.conf \/etc\/nginx\/sites-enabled\/\nsudo nginx -t && sudo systemctl reload nginx\nsudo certbot --nginx -d s3.example.com -d console-s3.example.com<\/code><\/pre>\n
Step 5: Managing Buckets with MinIO Client (mc)<\/h2>\n
# Download and install mc client\ncurl https:\/\/dl.min.io\/client\/mc\/release\/linux-amd64\/mc -o \/usr\/local\/bin\/mc\nchmod +x \/usr\/local\/bin\/mc\n\n# Configure local alias\nmc alias set local https:\/\/s3.example.com minio_admin_user UltraSecureMinioPassword2026!\n\n# Create a public bucket for website uploads\nmc mb local\/media-uploads\nmc anonymous set download local\/media-uploads<\/code><\/pre>\n
MinIO vs AWS S3 Cost and Performance Matrix<\/h2>\n\n\n\n\n\n\n\n
Metric \/ Feature<\/th>\nSelf-Hosted MinIO on NVMe VPS<\/th>\nAWS S3 Standard<\/th>\n<\/tr>\n<\/thead>\n
Egress Bandwidth Cost<\/strong><\/td>\n$0.00 \/ Unmetered<\/strong><\/td>\n$0.09 per GB transferred<\/td>\n<\/tr>\n
Read\/Write Throughput<\/strong><\/td>\nDirect NVMe Bus (> 1,000 MB\/s)<\/strong><\/td>\nNetwork-throttled API requests<\/td>\n<\/tr>\n
API Compatibility<\/strong><\/td>\n100% S3 Compliant (v4 signatures)<\/strong><\/td>\nNative AWS S3 API<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
Configuring Bucket Lifecycle Policies & Auto-Expiration<\/h2>\n
Avoid accumulating terabytes of temporary log files or old database backup archives by defining automated bucket lifecycle retention policies using the MinIO Client (mc<\/code>):<\/p>\n
# Create lifecycle rule: Auto-delete files older than 30 days in 'backups' bucket\nmc ilm add --expiry-days 30 local\/backups\n\n# Inspect active lifecycle rules\nmc ilm ls local\/backups<\/code><\/pre>\n
Enabling Server-Side Encryption (SSE-S3) for Compliance<\/h2>\n
Protect sensitive financial documents or client backups with automated AES-256 server-side encryption:<\/p>\n
# Enable automatic encryption on bucket\nmc encrypt set sse-s3 local\/secure-documents\n\n# Verify encryption configuration\nmc encrypt info local\/secure-documents<\/code><\/pre>\n
Connecting MinIO to WordPress with Offload Media Plugin<\/h2>\n
Seamlessly offload WordPress media library uploads to MinIO by installing the WP Offload Media or Media Cloud plugin, specifying your custom endpoint (https:\/\/s3.example.com<\/code>) and IAM credentials. All image thumbnails are served directly from MinIO NVMe storage!<\/p>\n
Configuring MinIO Prometheus Metrics & Grafana Dashboards<\/h2>\n
MinIO exports comprehensive real-time storage metrics\u2014including active S3 read\/write IOPS, network transfer rates, bucket capacity utilization, and API error codes\u2014via native Prometheus endpoints:<\/p>\n
# Scrape MinIO metrics in Prometheus configuration (\/etc\/prometheus\/prometheus.yml)\nscrape_configs:\n  - job_name: 'minio'\n    bearer_token: 'YourMinioMetricsJwtToken'\n    metrics_path: '\/minio\/v2\/metrics\/cluster'\n    static_configs:\n      - targets: ['127.0.0.1:9000']<\/code><\/pre>\n
Setting Up Multi-Site Active-Active Bucket Replication<\/h2>\n
For disaster recovery across multiple geographic regions, MinIO supports automated, asynchronous bucket-to-bucket replication over HTTPS:<\/p>\n
# Configure replication target between two MinIO instances\nmc admin bucket remote add local\/media-uploads https:\/\/minio-backup.example.com\/media-uploads   --service \"replication\" --access-key \"KEY\" --secret-key \"SECRET\"\n\n# Enable bidirectional site replication\nmc replicate add local\/media-uploads --priority \"1\"<\/code><\/pre>\n
\n
Recommended Related Technical Guides<\/h3>\n