feat: 로컬 이미지 업로드를 MinIO로 분리

Author: lunarbae628

infra/docker-compose.local.yml

@@ -70,10 +70,47 @@ services:
     networks:
       - docsa_local_net
 
+  minio:
+    image: minio/minio:latest
+    container_name: docsa-minio-local
+    restart: unless-stopped
+    command: ["server", "/data", "--console-address", ":9001"]
+    environment:
+      MINIO_ROOT_USER: ${LOCAL_MINIO_ROOT_USER:-docsa-local}
+      MINIO_ROOT_PASSWORD: ${LOCAL_MINIO_ROOT_PASSWORD:-docsa-local-password}
+      MINIO_API_CORS_ALLOW_ORIGIN: ${LOCAL_MINIO_CORS_ALLOW_ORIGIN:-http://localhost:3000,http://localhost:5173}
+      TZ: Asia/Seoul
+    ports:
+      - "${LOCAL_MINIO_API_PORT:-9000}:9000"
+      - "${LOCAL_MINIO_CONSOLE_PORT:-9001}:9001"
+    volumes:
+      - local_minio_data:/data
+    networks:
+      - docsa_local_net
+
+  minio-init:
+    image: minio/mc:latest
+    container_name: docsa-minio-init-local
+    depends_on:
+      - minio
+    environment:
+      LOCAL_MINIO_ROOT_USER: ${LOCAL_MINIO_ROOT_USER:-docsa-local}
+      LOCAL_MINIO_ROOT_PASSWORD: ${LOCAL_MINIO_ROOT_PASSWORD:-docsa-local-password}
+      LOCAL_MINIO_BUCKET: ${LOCAL_MINIO_BUCKET:-docsa-local}
+    entrypoint: >
+      /bin/sh -c "
+      until mc alias set local http://minio:9000 ${LOCAL_MINIO_ROOT_USER:-docsa-local} ${LOCAL_MINIO_ROOT_PASSWORD:-docsa-local-password}; do sleep 2; done;
+      mc mb --ignore-existing local/${LOCAL_MINIO_BUCKET:-docsa-local};
+      mc anonymous set download local/${LOCAL_MINIO_BUCKET:-docsa-local};
+      "
+    networks:
+      - docsa_local_net
+
 volumes:
   local_mysql_data:
   local_mongo_data:
   local_mailpit_data:
+  local_minio_data:
 
 networks:
   docsa_local_net:

src/main/java/io/ejangs/docsa/domain/image/config/S3Config.java

@@ -1,12 +1,17 @@
 package io.ejangs.docsa.domain.image.config;
 
+import java.net.URI;
 import lombok.RequiredArgsConstructor;
 
 import org.springframework.beans.factory.annotation.Value;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
+import software.amazon.awssdk.auth.credentials.AwsBasicCredentials;
+import software.amazon.awssdk.auth.credentials.StaticCredentialsProvider;
 import software.amazon.awssdk.regions.Region;
 import software.amazon.awssdk.services.s3.S3Client;
+import software.amazon.awssdk.services.s3.S3ClientBuilder;
+import software.amazon.awssdk.services.s3.S3Configuration;
 import software.amazon.awssdk.services.s3.presigner.S3Presigner;
 
 @Configuration
@@ -15,19 +20,59 @@ public class S3Config {
 
     @Bean
     public S3Presigner s3Presigner(
-            @Value("${cloud.aws.region}") String region
+            @Value("${cloud.aws.region}") String region,
+            @Value("${cloud.aws.s3.endpoint:}") String endpoint,
+            @Value("${cloud.aws.s3.path-style-access-enabled:false}") boolean pathStyleAccessEnabled,
+            @Value("${cloud.aws.credentials.access-key:}") String accessKey,
+            @Value("${cloud.aws.credentials.secret-key:}") String secretKey
     ) {
-        return S3Presigner.builder()
-                .region(Region.of(region))
-                .build();
+        S3Presigner.Builder builder = S3Presigner.builder()
+                .region(Region.of(region));
+
+        if (!endpoint.isBlank()) {
+            builder.endpointOverride(URI.create(endpoint));
+        }
+
+        if (pathStyleAccessEnabled) {
+            builder.serviceConfiguration(S3Configuration.builder()
+                    .pathStyleAccessEnabled(true)
+                    .build());
+        }
+
+        if (!accessKey.isBlank() && !secretKey.isBlank()) {
+            builder.credentialsProvider(StaticCredentialsProvider.create(
+                    AwsBasicCredentials.create(accessKey, secretKey)));
+        }
+
+        return builder.build();
     }
 
     @Bean
     public S3Client s3Client(
-            @Value("${cloud.aws.region}") String region
+            @Value("${cloud.aws.region}") String region,
+            @Value("${cloud.aws.s3.endpoint:}") String endpoint,
+            @Value("${cloud.aws.s3.path-style-access-enabled:false}") boolean pathStyleAccessEnabled,
+            @Value("${cloud.aws.credentials.access-key:}") String accessKey,
+            @Value("${cloud.aws.credentials.secret-key:}") String secretKey
     ) {
-        return S3Client.builder()
-                .region(Region.of(region))
-                .build();
+        S3ClientBuilder builder = S3Client.builder()
+                .region(Region.of(region));
+
+        if (!endpoint.isBlank()) {
+            builder.endpointOverride(URI.create(endpoint));
+        }
+
+        if (pathStyleAccessEnabled) {
+            builder.serviceConfiguration(S3Configuration.builder()
+                    .pathStyleAccessEnabled(true)
+                    .build());
+        }
+
+        if (!accessKey.isBlank() && !secretKey.isBlank()) {
+            builder.credentialsProvider(StaticCredentialsProvider.create(
+                    AwsBasicCredentials.create(accessKey, secretKey)));
+        }
+
+        return builder.build();
     }
 }

src/main/resources/application-local.yml

@@ -59,6 +59,18 @@ logging:
 server:
   port: 8080
 
+cloud:
+  aws:
+    region: ${AWS_REGION:ap-northeast-2}
+    credentials:
+      access-key: ${LOCAL_MINIO_ROOT_USER:docsa-local}
+      secret-key: ${LOCAL_MINIO_ROOT_PASSWORD:docsa-local-password}
+    s3:
+      bucket: ${LOCAL_MINIO_BUCKET:docsa-local}
+      endpoint: ${LOCAL_MINIO_ENDPOINT:http://localhost:9000}
+      path-style-access-enabled: true
+      public-base-url: ${LOCAL_MINIO_PUBLIC_BASE_URL:http://localhost:9000/docsa-local}
+
 app:
   cors:
     allowed-origin: