Commit 36f87c730f2f

Vincent Demeester <vincent@sbr.pm>
2022-10-25 11:27:51
systems/shikoku: enable dockerRegistry…
… and update insecure-registries configurations Signed-off-by: Vincent Demeester <vincent@sbr.pm>
main
1 parent 6d27c2e
Changed files (3)
systems
hosts
shikoku.nix
modules
dev
containers.nix
profiles
docker.nix
systems/hosts/shikoku.nix
@@ -110,6 +110,14 @@ in
       enable = true;
       devices = [{ device = "/dev/nvme0n1"; }];
     };
+    dockerRegistry = {
+      enable = true;
+      listenAddress = "0.0.0.0";
+      port = 5000;
+      enableDelete = true;
+      enableGarbageCollect = true;
+      garbageCollectDates = "daily";
+    };
     wireguard = {
       enable = true;
       ips = ips;
systems/modules/dev/containers.nix
@@ -89,7 +89,7 @@ in
             default-runtime = "docker-runc";
             containerd = "/run/containerd/containerd.sock";
             features = { buildkit = true; };
-            insecure-registries = [ "172.30.0.0/16" "192.168.12.0/16" "massimo.home:5000" "r.svc.home:5000" "r.svc.home" ];
+            insecure-registries = [ "172.30.0.0/16" "192.168.1.0/16" "10.100.0.0/16" "shikoku.home:5000" "r.svc.home:5000" "r.svc.home" ];
             seccomp-profile = ./my-seccomp.json;
           };
         };
systems/modules/profiles/docker.nix
@@ -64,7 +64,7 @@ in
           default-runtime = "docker-runc";
           containerd = "/run/containerd/containerd.sock";
           features = { buildkit = true; };
-          insecure-registries = [ "172.30.0.0/16" "192.168.12.0/16" "massimo.home:5000" "r.svc.home:5000" "r.svc.home" ];
+          insecure-registries = [ "172.30.0.0/16" "192.168.12.0/16" "shikoku.home:5000" "r.svc.home:5000" "r.svc.home" ];
           seccomp-profile = ./docker/my-seccomp.json;
         };
       };