mirror of
https://github.com/goharbor/harbor.git
synced 2024-11-17 15:55:26 +01:00
104 lines
3.7 KiB
YAML
104 lines
3.7 KiB
YAML
## Configuration file of Harbor
|
|
|
|
#The IP address or hostname to access admin UI and registry service.
|
|
#DO NOT use localhost or 127.0.0.1, because Harbor needs to be accessed by external clients.
|
|
hostname: reg.mydomain.com
|
|
|
|
# http related config
|
|
http:
|
|
# port for http, default is 80. If https enabled, this port will redirect to https port
|
|
port: 80
|
|
|
|
# https related config
|
|
https:
|
|
# https port for harbor, default is 443
|
|
port: 443
|
|
#The path of cert and key files for nginx
|
|
certificate: /data/cert/server.crt
|
|
private_key: /data/cert/server.key
|
|
|
|
# Uncomment external_url if you want to enable external proxy
|
|
# And when it enabled the hostname will no longer used
|
|
# external_url: https://reg.mydomain.com:8433
|
|
|
|
# The initial password of Harbor admin
|
|
# It only works in first time to install harbor
|
|
# Remember Change the admin password from UI after launching Harbor.
|
|
harbor_admin_password: Harbor12345
|
|
|
|
## Harbor DB configuration
|
|
database:
|
|
#The password for the root user of Harbor DB. Change this before any production use.
|
|
password: root123
|
|
|
|
# The default data volume
|
|
data_volume: /data
|
|
|
|
# Harbor Storage settings by default is using /data dir on local filesystem
|
|
# Uncomment storage_service setting If you want to using external storage
|
|
# storage_service:
|
|
# # ca_bundle is the path to the custom root ca certificate, which will be injected into the truststore
|
|
# # of registry's and chart repository's containers. This is usually needed when the user hosts a internal storage with self signed certificate.
|
|
# ca_bundle:
|
|
|
|
# # storage backend, default is filesystem, options include filesystem, azure, gcs, s3, swift and oss
|
|
# # for more info about this configuration please refer https://docs.docker.com/registry/configuration/
|
|
# filesystem:
|
|
# maxthreads: 100
|
|
# # set disable to true when you want to disable registry redirect
|
|
# redirect:
|
|
# disabled: false
|
|
|
|
# Clair configuration
|
|
clair:
|
|
# The interval of clair updaters, the unit is hour, set to 0 to disable the updaters.
|
|
updaters_interval: 12
|
|
|
|
# Config http proxy for Clair, e.g. http://my.proxy.com:3128
|
|
# Clair doesn't need to connect to harbor internal components via http proxy.
|
|
http_proxy:
|
|
https_proxy:
|
|
no_proxy: 127.0.0.1,localhost,core,registry
|
|
|
|
jobservice:
|
|
# Maximum number of job workers in job service
|
|
max_job_workers: 10
|
|
|
|
# Log configurations
|
|
log:
|
|
# options are debug, info, warn, error
|
|
level: info
|
|
# Log files are rotated log_rotate_count times before being removed. If count is 0, old versions are removed rather than rotated.
|
|
rotate_count: 50
|
|
# Log files are rotated only if they grow bigger than log_rotate_size bytes. If size is followed by k, the size is assumed to be in kilobytes.
|
|
# If the M is used, the size is in megabytes, and if G is used, the size is in gigabytes. So size 100, size 100k, size 100M and size 100G
|
|
# are all valid.
|
|
rotate_size: 200M
|
|
# The directory on your host that store log
|
|
location: /var/log/harbor
|
|
|
|
#This attribute is for migrator to detect the version of the .cfg file, DO NOT MODIFY!
|
|
_version: 1.8.0
|
|
|
|
# Uncomment external_database if using external database. And the password will replace the the password setting in database.
|
|
# And currently only support postgres.
|
|
# external_database:
|
|
# host: postgresql
|
|
# port: 5432
|
|
# username: postgres
|
|
# password: root123
|
|
# ssl_mode: disable
|
|
|
|
# Uncomment external_redis if using external Redis server
|
|
# external_redis:
|
|
# host: redis
|
|
# port: 6379
|
|
# password:
|
|
# # db_index 0 is for core, it's unchangeable
|
|
# registry_db_index: 1
|
|
# jobservice_db_index: 2
|
|
# chartmuseum_db_index: 3
|
|
|
|
# Uncomment uaa for trusting the certificate of uaa instance that is hosted via self-signed cert.
|
|
# uaa:
|
|
# ca_file: /path/to/ca |