mirror of
https://github.com/goharbor/harbor.git
synced 2024-07-01 01:05:13 +02:00
0c84751a10
1. Update notary template on docker-compose 2. automatic generate cert if not exist Signed-off-by: Qian Deng <dengq@vmware.com>
115 lines
4.7 KiB
YAML
115 lines
4.7 KiB
YAML
## Configuration file of Harbor
|
|
|
|
#This attribute is for migrator to detect the version of the .cfg file, DO NOT MODIFY!
|
|
_version: 1.7.0
|
|
#The IP address or hostname to access admin UI and registry service.
|
|
#DO NOT use localhost or 127.0.0.1, because Harbor needs to be accessed by external clients.
|
|
#DO NOT comment out this line, modify the value of "hostname" directly, or the installation will fail.
|
|
hostname: reg.mydomain.com
|
|
|
|
#The protocol for accessing the UI and token/notification service, by default it is http.
|
|
#It can be set to https if ssl is enabled on nginx.
|
|
ui_url_protocol: https
|
|
|
|
#Maximum number of job workers in job service
|
|
max_job_workers: 10
|
|
|
|
# The default data volume
|
|
data_volume: /data
|
|
|
|
#The path of cert and key files for nginx, they are applied only the protocol is set to https
|
|
ssl_cert: /data/cert/server.crt
|
|
ssl_cert_key: /data/cert/server.key
|
|
|
|
#The path of secretkey storage
|
|
secretkey_path: /data
|
|
|
|
#Admiral's url, comment this attribute, or set its value to NA when Harbor is standalone
|
|
admiral_url: NA
|
|
|
|
# Log configurations
|
|
log:
|
|
# Log files are rotated log_rotate_count times before being removed. If count is 0, old versions are removed rather than rotated.
|
|
rotate_count: 50
|
|
# Log files are rotated only if they grow bigger than log_rotate_size bytes. If size is followed by k, the size is assumed to be in kilobytes.
|
|
# If the M is used, the size is in megabytes, and if G is used, the size is in gigabytes. So size 100, size 100k, size 100M and size 100G
|
|
# are all valid.
|
|
rotate_size: 200M
|
|
# The directory that store log files
|
|
location: /var/log/harbor
|
|
|
|
#NOTES: The properties between BEGIN INITIAL PROPERTIES and END INITIAL PROPERTIES
|
|
#only take effect in the first boot, the subsequent changes of these properties
|
|
#should be performed on web ui
|
|
|
|
##The initial password of Harbor admin, only works for the first time when Harbor starts.
|
|
#It has no effect after the first launch of Harbor.
|
|
#Change the admin password from UI after launching Harbor.
|
|
harbor_admin_password: Harbor12345
|
|
|
|
## Harbor DB configuration
|
|
database:
|
|
#The address of the Harbor database. Only need to change when using external db.
|
|
host: postgresql
|
|
#The port of Harbor database host
|
|
port: 5432
|
|
#The user name of Harbor database
|
|
username: postgres
|
|
#The password for the root user of Harbor DB. Change this before any production use.
|
|
password: root123
|
|
|
|
|
|
# Redis server configuration
|
|
redis:
|
|
# Redis connection address
|
|
host: redis
|
|
# Redis connection port
|
|
port: 6379
|
|
# Redis connection password
|
|
password:
|
|
# Redis connection db index
|
|
# db_index 1,2,3 is for registry, jobservice and chartmuseum.
|
|
# db_index 0 is for UI, it's unchangeable
|
|
db_index: 1,2,3
|
|
|
|
|
|
# Clair DB configuration
|
|
clair:
|
|
# Clair DB host address. Only change it when using an exteral DB.
|
|
db_host: postgresql
|
|
# The password of the Clair's postgres database. Only effective when Harbor is deployed with Clair.
|
|
# Please update it before deployment. Subsequent update will cause Clair's API server and Harbor unable to access Clair's database.
|
|
db_password: root123
|
|
# Clair DB connect port
|
|
db_port: 5432
|
|
# Clair DB username
|
|
db_username: postgres
|
|
# Clair default database
|
|
db: postgres
|
|
# The interval of clair updaters, the unit is hour, set to 0 to disable the updaters.
|
|
updaters_interval: 12
|
|
|
|
#Config http proxy for Clair, e.g. http://my.proxy.com:3128
|
|
#Clair doesn't need to connect to harbor internal components via http proxy.
|
|
http_proxy:
|
|
https_proxy:
|
|
no_proxy: 127.0.0.1,localhost,core,registry
|
|
|
|
# Harbor Storage settings
|
|
storage:
|
|
#Please be aware that the following storage settings will be applied to both docker registry and helm chart repository.
|
|
#registry_storage_provider can be: filesystem, s3, gcs, azure, etc.
|
|
registry_storage_provider_name: filesystem
|
|
#registry_storage_provider_config is a comma separated "key: value" pairs, e.g. "key1: value, key2: value2".
|
|
#To avoid duplicated configurations, both docker registry and chart repository follow the same storage configuration specifications of docker registry.
|
|
#Refer to https://docs.docker.com/registry/configuration/#storage for all available configuration.
|
|
registry_storage_provider_config:
|
|
#registry_custom_ca_bundle is the path to the custom root ca certificate, which will be injected into the truststore
|
|
#of registry's and chart repository's containers. This is usually needed when the user hosts a internal storage with self signed certificate.
|
|
registry_custom_ca_bundle:
|
|
|
|
#If reload_config=true, all settings which present in harbor.yml take effect after prepare and restart harbor, it overwrites exsiting settings.
|
|
#reload_config=true
|
|
#Regular expression to match skipped environment variables
|
|
#skip_reload_env_pattern: (^EMAIL.*)|(^LDAP.*)
|