version: 0.1
log:
  fields:
    service: registry

storage:
  delete:
    enabled: true
  cache:
    blobdescriptor: inmemory
  filesystem:
    rootdirectory: /data

auth:
  htpasswd:
    realm: Registry
    path: /auth/registry.password

http:
  addr: :5000
  headers:
    X-Content-Type-Options: [nosniff]
    Access-Control-Allow-Origin: [https://registry.example.org]
    Access-Control-Allow-Methods: [HEAD,GET,OPTIONS,DELETE]
    Access-Control-Allow-Credentials: [true]
    Access-Control-Allow-Headers: [Authorization,Accept,Cache-Control]
    Access-Control-Expose-Headers: [Docker-Content-Digest]

health:
  storagedriver:
    enabled: true
    interval: 10s
    threshold: 3