version: 0.1
log:
  fields:
    service: registry
storage:
  cache:
    layerinfo: inmemory
  filesystem:
    rootdirectory: /srv/registry
http:
  addr: :5000
  tls:
    certificate: {{ tls_certs }}/{{ inventory_hostname }}.crt
    key: {{ tls_private }}/{{ inventory_hostname }}.key
    clientcas:
      - {{ tls_certs }}/ca.crt
    minimumtls: 1.3
  headers:
    X-Content-Type-Options: [nosniff]