---
# nocheck: dynamic-flag
node:
enabled: true
shared: true
bond: 1
docker:
healthcheck:
flavor: wget
port_key: registry
path: v2/
modes:
compose:
enabled: true
swarm:
enabled: false
# nocheck: default-placement-manager local registry that holds locally-built infinito images for docker stack deploy; chicken-and-egg if scheduled on a worker
placement: manager
enabled: true
shared: true
bond: 1
image: registry
version: "3"
name: registry
min_storage: 221MB
backup:
disabled: true
cpus: "0.5"
mem_reservation: 128m
mem_limit: 512m
pids_limit: 256
ports:
local:
registry: 5000
internal:
registry: 5000
onion:
# nocheck: onion-flag the registry accepts unauthenticated pushes from the node that builds into it, so its reach must stay the node
registry: false
lifecycle: beta
# nocheck: dynamic-flag - locally built images are rebuildable, the backup consumer stays permanently off
container_backup:
enabled: false
shared: true
# nocheck: variants-coverage the role has a single variant, and the guide edge is not a dimension of it: a second round would differ only by the README replay
docs:
bond: 0.5
enabled: "{{ 'web-app-docs' in group_names }}"
shared: "{{ 'web-app-docs' in group_names }}"