# Copy this file to config.yaml and replace every REPLACE_WITH_* value.
# config.yaml is ignored by Git and is installed as the quay/quay-config Secret.
ALLOW_PULLS_WITHOUT_STRICT_LOGGING: true
ALLOWED_OCI_ARTIFACT_TYPES:
  application/vnd.oci.image.config.v1+json:
    - application/vnd.oci.image.layer.v1.tar+zstd
  application/vnd.sylabs.sif.config.v1+json:
    - application/vnd.sylabs.sif.layer.v1+tar
AUTHENTICATION_TYPE: Database
AVATAR_KIND: local
BUILDLOGS_REDIS:
  host: valkey-primary.default.svc.cluster.local
  password: REPLACE_WITH_VALKEY_PASSWORD
  port: 6379
CONTACT_INFO:
  - https://brunner.ninja
DATABASE_SECRET_KEY: REPLACE_WITH_PERSISTENT_RANDOM_DATABASE_SECRET_KEY
DB_URI: postgresql://quay:REPLACE_WITH_QUAY_DATABASE_PASSWORD@postgresql.default.svc.cluster.local/quay
DEFAULT_UI: angular
DEFAULT_TAG_EXPIRATION: 2w
DISTRIBUTED_STORAGE_CONFIG:
  default:
    - RadosGWStorage
    - access_key: REPLACE_WITH_ROOK_RGW_ACCESS_KEY
      bucket_name: quay
      hostname: rook-ceph-rgw-my-store.rook-ceph.svc.cluster.local
      is_secure: false
      secret_key: REPLACE_WITH_ROOK_RGW_SECRET_KEY
      storage_path: /
DISTRIBUTED_STORAGE_DEFAULT_LOCATIONS: []
DISTRIBUTED_STORAGE_PREFERENCE:
  - default
EXTERNAL_TLS_TERMINATION: true
FEATURE_ACI_CONVERSION: false
FEATURE_ACTION_LOG_ROTATION: false
FEATURE_ANONYMOUS_ACCESS: true
FEATURE_APP_REGISTRY: true
FEATURE_APP_SPECIFIC_TOKENS: true
FEATURE_BITBUCKET_BUILD: false
FEATURE_BLACKLISTED_EMAILS: false
FEATURE_BUILD_SUPPORT: true
FEATURE_CHANGE_TAG_EXPIRATION: true
FEATURE_DIRECT_LOGIN: true
FEATURE_EXTENDED_REPOSITORY_NAMES: true
FEATURE_FIPS: false
FEATURE_GITHUB_BUILD: false
FEATURE_GITHUB_LOGIN: false
FEATURE_GITLAB_BUILD: false
FEATURE_GOOGLE_LOGIN: false
FEATURE_INVITE_ONLY_USER_CREATION: false
FEATURE_MAILING: true
FEATURE_NONSUPERUSER_TEAM_SYNCING_SETUP: false
FEATURE_PARTIAL_USER_AUTOCOMPLETE: true
FEATURE_PROXY_STORAGE: true
FEATURE_REPO_MIRROR: true
FEATURE_REQUIRE_TEAM_INVITE: true
FEATURE_RESTRICTED_V1_PUSH: true
FEATURE_SECURITY_NOTIFICATIONS: false
FEATURE_SECURITY_SCANNER: false
FEATURE_STORAGE_REPLICATION: false
FEATURE_TEAM_SYNCING: false
FEATURE_USER_CREATION: true
FEATURE_USER_LAST_ACCESSED: true
FEATURE_USER_LOG_ACCESS: false
FEATURE_USER_METADATA: false
FEATURE_USER_RENAME: false
FEATURE_USERNAME_CONFIRMATION: true
FRESH_LOGIN_TIMEOUT: 10m
GITHUB_LOGIN_CONFIG: {}
GITHUB_TRIGGER_CONFIG: {}
GITLAB_TRIGGER_KIND: {}
LDAP_ALLOW_INSECURE_FALLBACK: false
LDAP_EMAIL_ATTR: mail
LDAP_UID_ATTR: uid
LDAP_URI: ldap://localhost
LOG_ARCHIVE_LOCATION: default
LOGS_MODEL: database
LOGS_MODEL_CONFIG: {}
MAIL_DEFAULT_SENDER: brunner.ninja Registry <registry@brunner.ninja>
MAIL_PORT: 587
MAIL_SERVER: smtp-relay.gmail.com
MAIL_USE_AUTH: false
MAIL_USE_TLS: false
PREFERRED_URL_SCHEME: https
REGISTRY_LOGIN_CONFIG:
  CLIENT_ID: REPLACE_WITH_OIDC_CLIENT_ID
  CLIENT_SECRET: REPLACE_WITH_OIDC_CLIENT_SECRET
  LOGIN_SCOPES:
    - openid
    - email
  OIDC_SERVER: https://auth.brunner.ninja/application/o/registry/
  SERVICE_ICON: https://s3.brunner.ninja/authentik/media/public/auth-favicon.png
  SERVICE_NAME: brunner.ninja Auth
  VERIFIED_EMAIL_CLAIM_NAME: email
  OIDC_DISABLE_USER_ENDPOINT: true
REGISTRY_TITLE: brunner.ninja Registry
REGISTRY_TITLE_SHORT: brunner.ninja Registry
REPO_MIRROR_INTERVAL: 30
REPO_MIRROR_TLS_VERIFY: true
SEARCH_MAX_RESULT_PAGE_COUNT: 10
SEARCH_RESULTS_PER_PAGE: 10
SECRET_KEY: REPLACE_WITH_PERSISTENT_RANDOM_SECRET_KEY
SECURITY_SCANNER_INDEXING_INTERVAL: 30
SERVER_HOSTNAME: registry.brunner.ninja
SETUP_COMPLETE: true
SUPER_USERS:
  - REPLACE_WITH_QUAY_SUPERUSER
TAG_EXPIRATION_OPTIONS:
  - 0s
  - 1d
  - 1w
  - 2w
  - 4w
TEAM_RESYNC_STALE_TIME: 30m
TESTING: false
USE_CDN: false
USER_EVENTS_REDIS:
  host: valkey-primary.default.svc.cluster.local
  password: REPLACE_WITH_VALKEY_PASSWORD
  port: 6379
USER_RECOVERY_TOKEN_LIFETIME: 30m
USERFILES_LOCATION: default