commit cb9d784e49a85972df261a273d615096b106908e · pyrox.dev/nixpkgs

+37
nixos/modules/services/misc/docker-registry.nix
···

       5
       5
        
       let

     

       6
       6
        
         cfg = config.services.dockerRegistry;

     

       7
       7
        
       

     

       8
       8
       +
         blobCache = if cfg.enableRedisCache

     

       9
       9
       +
           then "redis"

     

       10
       10
       +
           else "inmemory";

     

       11
       11
       +
       

     

       12
       12
       +
         registryConfig = {

     

       13
       13
       +
           version =  "0.1";

     

       14
       14
       +
           log.fields.service = "registry";

     

       15
       15
       +
           storage = {

     

       16
       16
       +
             cache.blobdescriptor = blobCache;

     

       17
       17
       +
             filesystem.rootdirectory = cfg.storagePath;

     

       18
       18
       +
             delete.enabled = cfg.enableDelete;

     

       19
       19
       +
           };

     

       20
       20
       +
           http = {

     

       21
       21
       +
             addr = ":${builtins.toString cfg.port}";

     

       22
       22
       +
             headers.X-Content-Type-Options = ["nosniff"];

     

       23
       23
       +
           };

     

       24
       24
       +
           health.storagedriver = {

     

       25
       25
       +
             enabled = true;

     

       26
       26
       +
             interval = "10s";

     

       27
       27
       +
             threshold = 3;

     

       28
       28
       +
           };

     

       29
       29
       +
         };

     

       30
       30
       +
       

     

       31
       31
       +
         registryConfig.redis = mkIf cfg.enableRedisCache {

     

       32
       32
       +
           addr = "${cfg.redisUrl}";

     

       33
       33
       +
           password = "${cfg.redisPassword}";

     

       34
       34
       +
           db = 0;

     

       35
       35
       +
           dialtimeout = "10ms";

     

       36
       36
       +
           readtimeout = "10ms";

     

       37
       37
       +
           writetimeout = "10ms";

     

       38
       38
       +
           pool = {

     

       39
       39
       +
             maxidle = 16;

     

       40
       40
       +
             maxactive = 64;

     

       41
       41
       +
             idletimeout = "300s";

     

       42
       42
       +
           };

     

       43
       43
       +
         };

     

       44
       44
       +
       

     

       8
       45
        
         configFile = pkgs.writeText "docker-registry-config.yml" (builtins.toJSON (recursiveUpdate registryConfig cfg.extraConfig));

     

       9
       46
        
       

     

       10
       47
        
       in {