mirror of
https://github.com/TecharoHQ/anubis.git
synced 2025-11-29 17:10:22 +08:00
* fix(data): add ruleset to explicitly allow Docker / OCI clients Fixes #1252 This is technically a regression as these clients used to work in Anubis v1.22.0, however it is allowable to make this opt-in as most websites do not expect to be serving Docker / OCI registry client traffic. Signed-off-by: Xe Iaso <me@xeiaso.net> * Update metadata check-spelling run (pull_request) for Xe/gh-1252/docker-registry-client-fix Signed-off-by: check-spelling-bot <check-spelling-bot@users.noreply.github.com> on-behalf-of: @check-spelling <check-spelling-bot@check-spelling.dev> * test(docker-registry): export the right envvars Signed-off-by: Xe Iaso <me@xeiaso.net> * ci: add simdjson dependency for homebrew node Signed-off-by: Xe Iaso <me@xeiaso.net> * ci: install go/node without homebrew Signed-off-by: Xe Iaso <me@xeiaso.net> * test: use right github commit variable Signed-off-by: Xe Iaso <me@xeiaso.net> * ci: remove simdjson dependency Signed-off-by: Xe Iaso <me@xeiaso.net> * ci: install ko with an action Signed-off-by: Xe Iaso <me@xeiaso.net> * docs: add OCI registry caveat docs Signed-off-by: Xe Iaso <me@xeiaso.net> --------- Signed-off-by: Xe Iaso <me@xeiaso.net> Signed-off-by: check-spelling-bot <check-spelling-bot@users.noreply.github.com>
30 lines
740 B
YAML
30 lines
740 B
YAML
services:
|
|
registry:
|
|
image: distribution/distribution:edge
|
|
restart: always
|
|
|
|
relayd:
|
|
image: ghcr.io/xe/x/relayd
|
|
pull_policy: always
|
|
environment:
|
|
CERT_DIR: /etc/techaro/pki/registry.local.cetacean.club
|
|
CERT_FNAME: cert.pem
|
|
KEY_FNAME: key.pem
|
|
PROXY_TO: http://anubis:3000
|
|
ports:
|
|
- 3004:3004
|
|
volumes:
|
|
- ../pki/registry.local.cetacean.club:/etc/techaro/pki/registry.local.cetacean.club
|
|
|
|
anubis:
|
|
image: ko.local/anubis
|
|
restart: always
|
|
environment:
|
|
BIND: ":3000"
|
|
TARGET: http://registry:5000
|
|
POLICY_FNAME: /etc/techaro/anubis.yaml
|
|
USE_REMOTE_ADDRESS: "true"
|
|
ports:
|
|
- 3000
|
|
volumes:
|
|
- ./anubis.yaml:/etc/techaro/anubis.yaml
|