---
# nocheck: dynamic-flag
node:
  enabled: true
  shared: true
  bond: 1
docker:
  healthcheck:
    flavor: wget
    port_key: registry
    path: v2/
  modes:
    compose:
      enabled: true
    swarm:
      enabled: false
  # nocheck: default-placement-manager  local registry that holds locally-built infinito images for docker stack deploy; chicken-and-egg if scheduled on a worker
  placement: manager
  enabled: true
  shared: true
  bond: 1
  image: registry
  version: "3"
  name: registry
  min_storage: 221MB
  backup:
    disabled: true
  cpus: "0.5"
  mem_reservation: 128m
  mem_limit: 512m
  pids_limit: 256
  ports:
    local:
      registry: 5000
    internal:
      registry: 5000
    onion:
      # nocheck: onion-flag  the registry accepts unauthenticated pushes from the node that builds into it, so its reach must stay the node
      registry: false
  lifecycle: beta
# nocheck: dynamic-flag - locally built images are rebuildable, the backup consumer stays permanently off
container_backup:
  enabled: false
  shared: true