123 lines
3.8 KiB
Plaintext
123 lines
3.8 KiB
Plaintext
# Copy this file to config.yaml and replace every REPLACE_WITH_* value.
|
|
# config.yaml is ignored by Git and is installed as the quay/quay-config Secret.
|
|
ALLOW_PULLS_WITHOUT_STRICT_LOGGING: true
|
|
ALLOWED_OCI_ARTIFACT_TYPES:
|
|
application/vnd.oci.image.config.v1+json:
|
|
- application/vnd.oci.image.layer.v1.tar+zstd
|
|
application/vnd.sylabs.sif.config.v1+json:
|
|
- application/vnd.sylabs.sif.layer.v1+tar
|
|
AUTHENTICATION_TYPE: Database
|
|
AVATAR_KIND: local
|
|
BUILDLOGS_REDIS:
|
|
host: valkey-primary.default.svc.cluster.local
|
|
password: REPLACE_WITH_VALKEY_PASSWORD
|
|
port: 6379
|
|
CONTACT_INFO:
|
|
- https://brunner.ninja
|
|
DATABASE_SECRET_KEY: REPLACE_WITH_PERSISTENT_RANDOM_DATABASE_SECRET_KEY
|
|
DB_URI: postgresql://quay:REPLACE_WITH_QUAY_DATABASE_PASSWORD@postgresql.default.svc.cluster.local/quay
|
|
DEFAULT_UI: angular
|
|
DEFAULT_TAG_EXPIRATION: 2w
|
|
DISTRIBUTED_STORAGE_CONFIG:
|
|
default:
|
|
- RadosGWStorage
|
|
- access_key: REPLACE_WITH_ROOK_RGW_ACCESS_KEY
|
|
bucket_name: quay
|
|
hostname: rook-ceph-rgw-my-store.rook-ceph.svc.cluster.local
|
|
is_secure: false
|
|
secret_key: REPLACE_WITH_ROOK_RGW_SECRET_KEY
|
|
storage_path: /
|
|
DISTRIBUTED_STORAGE_DEFAULT_LOCATIONS: []
|
|
DISTRIBUTED_STORAGE_PREFERENCE:
|
|
- default
|
|
EXTERNAL_TLS_TERMINATION: true
|
|
FEATURE_ACI_CONVERSION: false
|
|
FEATURE_ACTION_LOG_ROTATION: false
|
|
FEATURE_ANONYMOUS_ACCESS: true
|
|
FEATURE_APP_REGISTRY: true
|
|
FEATURE_APP_SPECIFIC_TOKENS: true
|
|
FEATURE_BITBUCKET_BUILD: false
|
|
FEATURE_BLACKLISTED_EMAILS: false
|
|
FEATURE_BUILD_SUPPORT: true
|
|
FEATURE_CHANGE_TAG_EXPIRATION: true
|
|
FEATURE_DIRECT_LOGIN: true
|
|
FEATURE_EXTENDED_REPOSITORY_NAMES: true
|
|
FEATURE_FIPS: false
|
|
FEATURE_GITHUB_BUILD: false
|
|
FEATURE_GITHUB_LOGIN: false
|
|
FEATURE_GITLAB_BUILD: false
|
|
FEATURE_GOOGLE_LOGIN: false
|
|
FEATURE_INVITE_ONLY_USER_CREATION: false
|
|
FEATURE_MAILING: true
|
|
FEATURE_NONSUPERUSER_TEAM_SYNCING_SETUP: false
|
|
FEATURE_PARTIAL_USER_AUTOCOMPLETE: true
|
|
FEATURE_PROXY_STORAGE: true
|
|
FEATURE_REPO_MIRROR: true
|
|
FEATURE_REQUIRE_TEAM_INVITE: true
|
|
FEATURE_RESTRICTED_V1_PUSH: true
|
|
FEATURE_SECURITY_NOTIFICATIONS: false
|
|
FEATURE_SECURITY_SCANNER: false
|
|
FEATURE_STORAGE_REPLICATION: false
|
|
FEATURE_TEAM_SYNCING: false
|
|
FEATURE_USER_CREATION: true
|
|
FEATURE_USER_LAST_ACCESSED: true
|
|
FEATURE_USER_LOG_ACCESS: false
|
|
FEATURE_USER_METADATA: false
|
|
FEATURE_USER_RENAME: false
|
|
FEATURE_USERNAME_CONFIRMATION: true
|
|
FRESH_LOGIN_TIMEOUT: 10m
|
|
GITHUB_LOGIN_CONFIG: {}
|
|
GITHUB_TRIGGER_CONFIG: {}
|
|
GITLAB_TRIGGER_KIND: {}
|
|
LDAP_ALLOW_INSECURE_FALLBACK: false
|
|
LDAP_EMAIL_ATTR: mail
|
|
LDAP_UID_ATTR: uid
|
|
LDAP_URI: ldap://localhost
|
|
LOG_ARCHIVE_LOCATION: default
|
|
LOGS_MODEL: database
|
|
LOGS_MODEL_CONFIG: {}
|
|
MAIL_DEFAULT_SENDER: brunner.ninja Registry <registry@brunner.ninja>
|
|
MAIL_PORT: 587
|
|
MAIL_SERVER: smtp-relay.gmail.com
|
|
MAIL_USE_AUTH: false
|
|
MAIL_USE_TLS: false
|
|
PREFERRED_URL_SCHEME: https
|
|
REGISTRY_LOGIN_CONFIG:
|
|
CLIENT_ID: REPLACE_WITH_OIDC_CLIENT_ID
|
|
CLIENT_SECRET: REPLACE_WITH_OIDC_CLIENT_SECRET
|
|
LOGIN_SCOPES:
|
|
- openid
|
|
- email
|
|
OIDC_SERVER: https://auth.brunner.ninja/application/o/registry/
|
|
SERVICE_ICON: https://s3.brunner.ninja/authentik/media/public/auth-favicon.png
|
|
SERVICE_NAME: brunner.ninja Auth
|
|
VERIFIED_EMAIL_CLAIM_NAME: email
|
|
OIDC_DISABLE_USER_ENDPOINT: true
|
|
REGISTRY_TITLE: brunner.ninja Registry
|
|
REGISTRY_TITLE_SHORT: brunner.ninja Registry
|
|
REPO_MIRROR_INTERVAL: 30
|
|
REPO_MIRROR_TLS_VERIFY: true
|
|
SEARCH_MAX_RESULT_PAGE_COUNT: 10
|
|
SEARCH_RESULTS_PER_PAGE: 10
|
|
SECRET_KEY: REPLACE_WITH_PERSISTENT_RANDOM_SECRET_KEY
|
|
SECURITY_SCANNER_INDEXING_INTERVAL: 30
|
|
SERVER_HOSTNAME: registry.brunner.ninja
|
|
SETUP_COMPLETE: true
|
|
SUPER_USERS:
|
|
- REPLACE_WITH_QUAY_SUPERUSER
|
|
TAG_EXPIRATION_OPTIONS:
|
|
- 0s
|
|
- 1d
|
|
- 1w
|
|
- 2w
|
|
- 4w
|
|
TEAM_RESYNC_STALE_TIME: 30m
|
|
TESTING: false
|
|
USE_CDN: false
|
|
USER_EVENTS_REDIS:
|
|
host: valkey-primary.default.svc.cluster.local
|
|
password: REPLACE_WITH_VALKEY_PASSWORD
|
|
port: 6379
|
|
USER_RECOVERY_TOKEN_LIFETIME: 30m
|
|
USERFILES_LOCATION: default
|