Issue with image loading

[PagesHydro]

Hi Docs community 👋 My company Hydro-Berlin self-hosts this amazing app, so thank you for it first ! :)

We are currently encountering an issue where our instance of Docs can upload files and images (via the /image and /file commands) to our self-hosted Minio S3 instance but they cannot be displayed back on the frontend. I checked and the files / images are correctly stored in our S3 but they seem "corrupted" when shown to the user on the frontend.

After downloading an uploaded python file, the only content was 400 Bad Request: malformed Host header, which makes me wonder if this has to do with a Django host-related security setting. I was however not able to debug this.
I was also wondering if this might have to do with the MEDIA_BASE_URL setting, which I was not sure how to configure as the documentation for it is empty.

Has anyone encountered a similar issue ?
I would appreciate any help or pointers.

Thank you !

This seemed to me like an issue coming from me and not Docs, hence placing it here and not in the issues.

[ahofbeck]

In case this is still needed ... assuming you are using docker ...

I'm not doing this professionally, but minio needs to be in the same docker network as docs.
For the connection it required ssl between minio and docs. The cert needs to be mounted to the containers.
The third barrier was the nginx config file.
In case it is docker, I can take a look at how I did tomorrow and send you an excerpt.

[PagesHydro]

Hi @ahofbeck thanks for the reply.
It is indeed Docker. We are self hosting minio on the same Docker network. Docs queries the container directly through the docker network. There is however no SSL certificate involved in this connection.

If you don't mind sharing your config, it would be really appreciated yes 🙏

[ahofbeck]

Sorry for the delayed answer
I added this to the volume section of the minio

• ./certs/minio:/root/.minio/certs

This to the backend of docs

Modified Entrypoint:
entrypoint: ["sh","-lc","update-ca-certificates && exec "$@"","--"]
command: >
gunicorn impress.wsgi:application
--bind 0.0.0.0:8000
--workers 3
--timeout 120

added certs
volumes:
- ./certs/keycloak.crt:/usr/local/share/ca-certificates/keycloak.crt
- ./certs/minio/public.crt:/usr/local/share/ca-certificates/minio.crt
environment:
- REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt

... this was my path to make it work, probably not the most professional way. It can be that I have missed some steps in between.

[PagesHydro]

Thanks a lot for sharing :) I will experiment with this asap !