This commit is contained in:
starry
2025-06-18 17:08:14 +08:00
committed by GitHub
parent c607061dae
commit d0b1ea8582

View File

@@ -1,86 +1,86 @@
[server] [server]
host = "0.0.0.0" host = "0.0.0.0"
# 监听端口 # 监听端口
port = 5000 port = 5000
# Github文件大小限制字节默认2GB # Github文件大小限制字节默认2GB
fileSize = 2147483648 fileSize = 2147483648
[rateLimit] [rateLimit]
# 每个IP每小时允许的请求数(注意Docker镜像每个层为一个请求) # 每个IP每小时允许的请求数(注意Docker镜像每个层为一个请求)
requestLimit = 200 requestLimit = 200
# 限流周期(小时) # 限流周期(小时)
periodHours = 1.0 periodHours = 1.0
[security] [security]
# IP白名单支持单个IP或IP段 # IP白名单支持单个IP或IP段
# 白名单中的IP不受限流限制 # 白名单中的IP不受限流限制
whiteList = [ whiteList = [
"127.0.0.1", "127.0.0.1",
"192.168.1.0/24" "192.168.1.0/24"
] ]
# IP黑名单支持单个IP或IP段 # IP黑名单支持单个IP或IP段
# 黑名单中的IP将被直接拒绝访问 # 黑名单中的IP将被直接拒绝访问
blackList = [ blackList = [
"192.168.100.1" "192.168.100.1"
] ]
[proxy] [proxy]
# 代理服务白名单支持GitHub仓库和Docker镜像支持通配符 # 代理服务白名单支持GitHub仓库和Docker镜像支持通配符
# 只允许访问白名单中的仓库/镜像,为空时不限制 # 只允许访问白名单中的仓库/镜像,为空时不限制
whiteList = [] whiteList = []
# 代理服务黑名单支持GitHub仓库和Docker镜像支持通配符 # 代理服务黑名单支持GitHub仓库和Docker镜像支持通配符
# 禁止访问黑名单中的仓库/镜像 # 禁止访问黑名单中的仓库/镜像
blackList = [ blackList = [
"baduser/malicious-repo", "baduser/malicious-repo",
"*/malicious-repo", "*/malicious-repo",
"baduser/*" "baduser/*"
] ]
# SOCKS5代理配置支持有用户名/密码认证和无认证模式 # SOCKS5代理配置支持有用户名/密码认证和无认证模式
# 无认证: socks5://127.0.0.1:1080 # 无认证: socks5://127.0.0.1:1080
# 有认证: socks5://username:password@127.0.0.1:1080 # 有认证: socks5://username:password@127.0.0.1:1080
# 留空不使用代理 # 留空不使用代理
socks5 = "" socks5 = ""
[download] [download]
# 批量下载离线镜像数量限制 # 批量下载离线镜像数量限制
maxImages = 10 maxImages = 10
# Registry映射配置支持多种镜像仓库上游 # Registry映射配置支持多种镜像仓库上游
[registries] [registries]
# GitHub Container Registry # GitHub Container Registry
[registries."ghcr.io"] [registries."ghcr.io"]
upstream = "ghcr.io" upstream = "ghcr.io"
authHost = "ghcr.io/token" authHost = "ghcr.io/token"
authType = "github" authType = "github"
enabled = true enabled = true
# Google Container Registry # Google Container Registry
[registries."gcr.io"] [registries."gcr.io"]
upstream = "gcr.io" upstream = "gcr.io"
authHost = "gcr.io/v2/token" authHost = "gcr.io/v2/token"
authType = "google" authType = "google"
enabled = true enabled = true
# Quay.io Container Registry # Quay.io Container Registry
[registries."quay.io"] [registries."quay.io"]
upstream = "quay.io" upstream = "quay.io"
authHost = "quay.io/v2/auth" authHost = "quay.io/v2/auth"
authType = "quay" authType = "quay"
enabled = true enabled = true
# Kubernetes Container Registry # Kubernetes Container Registry
[registries."registry.k8s.io"] [registries."registry.k8s.io"]
upstream = "registry.k8s.io" upstream = "registry.k8s.io"
authHost = "registry.k8s.io" authHost = "registry.k8s.io"
authType = "anonymous" authType = "anonymous"
enabled = true enabled = true
[tokenCache] [tokenCache]
# 是否启用缓存(同时控制Token和Manifest缓存)显著提升性能 # 是否启用缓存(同时控制Token和Manifest缓存)显著提升性能
enabled = true enabled = true
# 默认缓存时间(分钟) # 默认缓存时间(分钟)
defaultTTL = "20m" defaultTTL = "20m"