{
  "module": "minio",
  "version": "1",

  "provides": [{"name": "s3-bucket", "scope": "mesh"}],
  "capabilities": ["container-runtime"],

  "listens": [
    {"port": 9000, "protocol": "tcp", "from": "mesh", "why": "the S3 endpoint"}
  ],

  "serves": {
    "s3-bucket": {"port": 9000, "scheme": "http", "region": "us-east-1"}
  },

  "receives": {"s3-bucket": "/var/lib/minio/grants/mesh.json"},
  "grants": {"s3-bucket": "/var/lib/minio/grants"},

  "own-secrets": {"root": "/var/lib/minio/root.secret"},

  "resources": [
    {"id": "state", "type": "directory", "path": "/var/lib/minio", "mode": "0700"},
    {"id": "grants", "type": "directory", "path": "/var/lib/minio/grants", "mode": "0700"},

    {"id": "root-env", "type": "file", "path": "/var/lib/minio/root.env", "mode": "0600",
     "content": "MINIO_ROOT_USER=meshroot\nMINIO_ROOT_PASSWORD=${secret:root}\n"},

    {"id": "net", "type": "network", "name": "minio"},

    {"id": "server", "type": "container", "name": "minio",
     "image": "minio/minio@sha256:aefec8a86702aff0b0dcfdd9284bd7ab7c5631cbf9be63275799e6edcb30dfa2",
     "network": "minio",
     "args": ["server", "/data", "--console-address", ":9001"],
     "env-file": ["/var/lib/minio/root.env"],
     "ports": ["9000:9000"],
     "volumes": ["/services/minio/data/data1-1:/data"],
     "restart-on": ["root-env"]},

    {"id": "provisioner", "type": "container", "name": "mesh-provision-objectstore",
     "image": "mesh-provision-objectstore@sha256:0000000000000000000000000000000000000000000000000000000000000000",
     "network": "minio",
     "env": {
       "GRANTS": "/var/lib/minio/grants",
       "MESH_OBJECTSTORE_URL": "http://minio:9000",
       "MESH_OBJECTSTORE_ROOT_USER": "meshroot",
       "MESH_OBJECTSTORE_ROOT_PASSWORD_FILE": "/run/secrets/root"
     },
     "volumes": [
       "/var/lib/minio/grants:/var/lib/minio/grants:ro",
       "/var/lib/minio/root.secret:/run/secrets/root:ro"
     ],
     "restart-on": ["grants", "root-env"]}
  ]
}