diff --git a/s3/middleware.go b/s3/middleware.go
index db6c70ea72a13b6d718de9115291675d61c1e9dd..6ae215d5a8a02bd0af59a8753f4a35330372ad6a 100644
--- a/s3/middleware.go
+++ b/s3/middleware.go
@@ -44,20 +44,28 @@ func NewClient(conf ini.File) (*minio.Client, error) {
 	upstream, _ := conf.Get("objects", "s3-upstream")
 	accessKey, _ := conf.Get("objects", "s3-access-key")
 	secretKey, _ := conf.Get("objects", "s3-secret-key")
+	insecure, _ := conf.Get("objects", "s3-insecure")
 	if upstream == "" || accessKey == "" || secretKey == "" {
 		return nil, ErrDisabled
 	}
 
 	return minio.New(upstream, &minio.Options{
 		Creds:  credentials.NewStaticV4(accessKey, secretKey, ""),
-		Secure: true,
+		Secure: insecure != "yes",
 	})
 }
 
 func URL(conf ini.File, bucket string) string {
 	upstream, _ := conf.Get("objects", "s3-upstream")
+	insecure, _ := conf.Get("objects", "s3-insecure")
 	if upstream == "" {
 		return ""
 	}
-	return "https://" + upstream
+
+	proto := "https"
+	if insecure == "yes" {
+		proto = "http"
+	}
+
+	return proto + "://" + upstream
 }