Public read-only distroless OCI mirror (zot + edge vhost + auditor)

1 files changed, 88 insertions, 0 deletions

diff --git a/deploy/config.json b/deploy/config.json
new file mode 100644
index 0000000..642046a
--- /dev/null
+++ b/deploy/config.json
@@ -0,0 +1,88 @@
+{
+  "distSpecVersion": "1.1.1",
+  "storage": {
+    "rootDirectory": "/var/lib/registry",
+    "gc": true,
+    "gcDelay": "1h",
+    "dedupe": true
+  },
+  "http": {
+    "address": "0.0.0.0",
+    "port": "5000",
+    "realm": "distroless-mirror",
+    "accessControl": {
+      "repositories": {
+        "**": {
+          "anonymousPolicy": [
+            "read"
+          ]
+        }
+      }
+    }
+  },
+  "log": {
+    "level": "info",
+    "output": "/dev/stdout"
+  },
+  "extensions": {
+    "sync": {
+      "enable": true,
+      "downloadDir": "/var/lib/registry/.sync",
+      "registries": [
+        {
+          "urls": [
+            "https://gcr.io"
+          ],
+          "tlsVerify": true,
+          "onDemand": true,
+          "manifestCheckInterval": "30m",
+          "maxRetries": 3,
+          "retryDelay": "5m",
+          "maxRetryDelay": "30m",
+          "content": [
+            {
+              "prefix": "distroless/static",
+              "tags": {
+                "regex": "^(latest|nonroot|debug|debug-nonroot)$"
+              },
+              "platforms": [
+                "linux/amd64",
+                "linux/arm64"
+              ]
+            },
+            {
+              "prefix": "distroless/base",
+              "tags": {
+                "regex": "^(latest|nonroot|debug|debug-nonroot)$"
+              },
+              "platforms": [
+                "linux/amd64",
+                "linux/arm64"
+              ]
+            },
+            {
+              "prefix": "distroless/cc",
+              "tags": {
+                "regex": "^(latest|nonroot|debug|debug-nonroot)$"
+              },
+              "platforms": [
+                "linux/amd64",
+                "linux/arm64"
+              ]
+            },
+            {
+              "prefix": "distroless/python3",
+              "tags": {
+                "regex": "^(latest|nonroot|debug|debug-nonroot)$"
+              },
+              "platforms": [
+                "linux/amd64",
+                "linux/arm64"
+              ]
+            }
+          ]
+        }
+      ]
+    }
+  }
+}