38 lines
943 B
Nix
38 lines
943 B
Nix
|
{ config, pkgs, lib, ... }:
|
||
|
|
let secrets = import ./secrets.nix;
|
||
|
|
in {
|
||
|
|
imports = [ ../../common ../../common/generic-lxc.nix ];
|
||
|
|
|
||
|
|
# the registry port and metrics port
|
||
|
|
networking.firewall.allowedTCPPorts = [ config.services.dockerRegistry.port ];
|
||
|
|
|
||
|
|
environment.etc.htpasswd = {
|
||
|
|
enable = true;
|
||
|
|
text = secrets.htpasswd;
|
||
|
|
};
|
||
|
|
|
||
|
|
services.dockerRegistry = {
|
||
|
|
enable = true;
|
||
|
|
enableDelete = true;
|
||
|
|
enableGarbageCollect = true;
|
||
|
|
listenAddress = "0.0.0.0";
|
||
|
|
storagePath = null; # We want to store in s3
|
||
|
|
garbageCollectDates = "weekly";
|
||
|
|
|
||
|
|
extraConfig = {
|
||
|
|
# S3 Storages
|
||
|
|
storage.s3 = {
|
||
|
|
accesskey = secrets.access;
|
||
|
|
secretkey = secrets.secret;
|
||
|
|
regionendpoint = "https://s3.voidcorp.nl";
|
||
|
|
bucket = "docker";
|
||
|
|
region = "us-east-1"; # Fake but needed
|
||
|
|
};
|
||
|
|
auth.htpasswd = {
|
||
|
|
realm = "Voidcorp Registry";
|
||
|
|
path = "/etc/htpasswd";
|
||
|
|
};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|