nixpkgs/nixos/modules/services/misc/docker-registry.nix

144 lines
3.2 KiB
Nix

{ config, lib, pkgs, ... }:
with lib;
let
cfg = config.services.dockerRegistry;
blogCache = if cfg.enableRedisCache
then "redis"
else "inmemory";
registryConfig = {
version = "0.1";
log = {
fields = {
service = "registry";
};
};
storage = {
cache = {
blobdescriptor = "${blogCache}";
};
filesystem = {
rootdirectory = "/var/lib/registry";
};
delete = {
enabled = cfg.enableDelete;
};
};
http = {
addr = ":5000";
headers = {
X-Content-Type-Options = "[nosniff]";
};
};
health = {
storagedriver = {
enabled = true;
interval = "10s";
threshold = 3;
};
};
};
registryConfig.redis = mkIf cfg.enableRedisCache {
addr = "${cfg.redisUrl}";
password = "${cfg.redisPassword}";
db = 0;
dialtimeout = "10ms";
readtimeout = "10ms";
writetimeout = "10ms";
pool = {
maxidle = 16;
maxactive = 64;
idletimeout = "300s";
};
};
in {
options.services.dockerRegistry = {
enable = mkEnableOption "Docker Registry";
listenAddress = mkOption {
description = "Docker registry host or ip to bind to.";
default = "127.0.0.1";
type = types.str;
};
port = mkOption {
description = "Docker registry port to bind to.";
default = 5000;
type = types.int;
};
storagePath = mkOption {
type = types.path;
default = "/var/lib/docker-registry";
description = "Docker registry storage path.";
};
enableDelete = mkOption {
type = types.bool;
default = false;
description = "Enable delete for manifests and blobs.";
};
enableRedisCache = mkOption {
type = types.bool;
default = false;
description = "Enable redis as blob cache instade of inmemory.";
};
redisUrl = mkOption {
type = types.str;
default = "localhost:6379";
description = "Set redis host and port.";
};
redisPassword = mkOption {
type = types.str;
default = "asecret";
description = "Set redis password.";
};
extraConfig = mkOption {
description = ''
Docker extra registry configuration via environment variables.
'';
default = {};
type = types.attrsOf types.str;
};
};
config = mkIf cfg.enable {
environment.etc."docker/registry/config.yml".text = builtins.toJSON registryConfig;
systemd.services.docker-registry = {
description = "Docker Container Registry";
wantedBy = [ "multi-user.target" ];
after = [ "network.target" ];
environment = {
REGISTRY_HTTP_ADDR = "${cfg.listenAddress}:${toString cfg.port}";
REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY = cfg.storagePath;
} // cfg.extraConfig;
script = ''
${pkgs.docker-distribution}/bin/registry serve \
/etc/docker/registry/config.yml
'';
serviceConfig = {
User = "docker-registry";
WorkingDirectory = cfg.storagePath;
};
};
users.extraUsers.docker-registry = {
createHome = true;
home = cfg.storagePath;
};
};
}