version: 0.1
log:
  fields:
    service: registry
storage:
  cache:
    layerinfo: inmemory
  filesystem:
    rootdirectory: /srv/registry
{% if htpasswd is defined %}
auth:
  htpasswd:
    realm: Authentication Required
    path: /etc/docker-distribution/registry/htpasswd
{% endif %}
http:
  addr: :5000
{% if docker_distribution_secret is defined %}
  secret: {{ secret }}
{% endif %}
  tls:
    certificate: {{ tls_certs }}/{{ inventory_hostname }}.crt
    key: {{ tls_private }}/{{ inventory_hostname }}.key
    clientcas:
      - {{ tls_certs }}/ca.crt
    minimumtls: 1.3
  headers:
    X-Content-Type-Options: [nosniff]