feat: MinIO integration — bucket finance, API service upload, Nginx routing

- 01-infra/nginx-configs: add MinIO /minio/ and /minio-console/ location blocks
  (port 9000 S3 API, port 9001 Console UI, path stripping via rewrite)
- 03-apiservice: integrate MinIO minio-python SDK for file upload
  - requirements.txt: add minio==7.2.11
  - app/core/config.py: add MINIO_ENDPOINT, ACCESS_KEY, SECRET_KEY, BUCKET_FINANCE, USE_SSL
  - app/services/minio_client.py: new — upload_file(), get_presigned_url(), delete_file()
  - app/routes/pages.py: replace local /data/uploads/ write with MinIO upload to finance bucket
  - docker-compose.yml: pass MinIO env vars to container
  - .env.example: document MinIO vars
- 07-minio/.env.example: add MINIO_SVC_ACCESS_KEY/SECRET_KEY section
- 07-minio/README.md: add Python minio SDK and Airflow DAG usage guide
- CLAUDE.md: project context (servers, SSH, paths, service distribution)
- document-obsidiant/: initial Obsidian docs for all services

03-apiservice/app/routes/pages.py

@@ -19,6 +19,7 @@ from app.security.permissions import require_role, Roles
 from app.db.session import get_db
 from app.models.upload import UploadHistory
 from app.services.airflow_client import airflow_client
+from app.services import minio_client
 
 logger = logging.getLogger(__name__)
 
@@ -28,7 +29,7 @@ router = APIRouter()
 templates_dir = Path(__file__).parent.parent / "templates"
 templates = Jinja2Templates(directory=str(templates_dir))
 
-# Upload directory
+# Local fallback directory (used only if MinIO is not configured)
 UPLOAD_DIR = Path("/data/uploads")
 UPLOAD_DIR.mkdir(parents=True, exist_ok=True)
 
@@ -120,29 +121,37 @@ async def upload_finance_file(
     timestamp = datetime.now().strftime("%Y%m%d_%H%M%S")
     safe_filename = file.filename.replace(" ", "_")
     unique_filename = f"{timestamp}_{safe_filename}"
-    filepath = UPLOAD_DIR / unique_filename
-    
-    # Save file
+
+    # Read file content
     try:
         content = await file.read()
-        with open(filepath, "wb") as f:
-            f.write(content)
     except Exception as e:
-        raise HTTPException(
-            status_code=500,
-            detail=f"Failed to save file: {str(e)}"
+        raise HTTPException(status_code=500, detail=f"Failed to read file: {str(e)}")
+
+    # Upload to MinIO finance bucket
+    object_key = f"finance/{unique_filename}"
+    try:
+        minio_client.upload_file(
+            bucket=settings.MINIO_BUCKET_FINANCE,
+            object_name=object_key,
+            data=content,
+            content_type="application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
         )
-    
+        filepath_stored = object_key  # store MinIO key in DB
+    except Exception as e:
+        logger.error(f"MinIO upload failed: {e}")
+        raise HTTPException(status_code=500, detail=f"Failed to upload file to storage: {str(e)}")
+
     # Get username from session
     user = request.session.get("user")
     username = user.get("username") if user else "anonymous"
-    
+
     # Create upload record in database
     upload_id = f"upload_{timestamp}"
     upload_record = UploadHistory(
         upload_id=upload_id,
         filename=file.filename,
-        filepath=str(filepath),
+        filepath=filepath_stored,  # MinIO object key: finance/<filename>
         description=description,
         status="pending",
         uploaded_by=username