networks:
  network:
    ipam:
      driver: default
      config:
        - subnet: '176.6.0.0/16'

services:
  minio:
    image: minio/minio:latest
    container_name: minio
    restart: always
    # privileged: true 它几乎拥有与宿主机 root 相同的所有权限;MinIO 是纯用户空间的对象存储服务;无需用到特权模式,故而安全性与最小权限原则
    networks:
      network:
        ipv4_address: 177.7.0.6
    ports:
      - "9000:9000"
      - "9001:9001"
    environment:
      MINIO_ROOT_USER: supermeminio
      MINIO_ROOT_PASSWORD: minio20260909
      MINIO_SERVER_URL: "https://oss.ycdat.cn:9000"   # ✅ 指定 API 外部访问地址
    volumes:
      - ./minio/data:/data
      - ./minio/certs:/root/.minio/certs  # ✅：挂载证书目录
    command: server /data --console-address ":9001"