From 5a8d9370af750c25ac55a7ced51e24f29bb9facc Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Tue, 24 Oct 2023 23:31:26 +0200
Subject: add new role docker/registry (WIP)

---
 roles/docker/registry/templates/config.yml.j2 | 35 +++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100644 roles/docker/registry/templates/config.yml.j2

(limited to 'roles/docker/registry/templates')

diff --git a/roles/docker/registry/templates/config.yml.j2 b/roles/docker/registry/templates/config.yml.j2
new file mode 100644
index 00000000..ac5bbae1
--- /dev/null
+++ b/roles/docker/registry/templates/config.yml.j2
@@ -0,0 +1,35 @@
+version: 0.1
+log:
+  accesslog:
+    disabled: true
+storage:
+  filesystem:
+    rootdirectory: /var/lib/docker-registry
+  cache:
+    blobdescriptor: inmemory
+  delete:
+    enabled: true
+http:
+  addr: "{{ docker_registry_http_listen }}"
+{% if docker_registry_http_secret is defined %}
+  secret: "{{ docker_registry_http_secret }}"
+{% endif %}
+  headers:
+    X-Content-Type-Options: [nosniff]
+{% if docker_registry_http_tls is defined %}
+  tls:
+    certificate: "{{ x509_certificate_path_fullchain }}"
+    key: "{{ x509_certificate_path_key }}"
+{% endif %}
+{% if docker_registry_http_listen_debug is defined %}
+  debug:
+    addr: "{{ docker_registry_http_listen_debug }}"
+    prometheus:
+      enabled: true
+      path: /metrics
+{% endif %}
+health:
+  storagedriver:
+    enabled: true
+    interval: 10s
+    threshold: 3
-- 
cgit v1.2.3