{ config, lib, pkgs, ... }: with lib; let cfg = config.services.dockerRegistry; in { ###### interface options.services.dockerRegistry = { enable = mkOption { description = "Whether to enable docker registry server."; default = false; type = types.bool; }; host = mkOption { description = "Docker registry host or ip to bind to."; default = "127.0.0.1"; type = types.str; }; port = mkOption { description = "Docker registry port to bind to."; default = 5000; type = types.int; }; storagePath = mkOption { type = types.path; default = "/var/lib/docker/registry"; description = "Docker registry strorage path."; }; extraConfig = mkOption { description = '' Docker extra registry configuration. See ''; default = {}; type = types.attrsOf types.str; }; }; config = mkIf cfg.enable { systemd.services.docker-registry = { description = "Docker Container Registry"; wantedBy = [ "multi-user.target" ]; after = [ "network.target" ]; environment = { REGISTRY_HOST = cfg.host; REGISTRY_PORT = toString cfg.port; GUNICORN_OPTS = "[--preload]"; # see https://github.com/docker/docker-registry#sqlalchemy STORAGE_PATH = cfg.storagePath; } // cfg.extraConfig; serviceConfig = { ExecStart = "${pkgs.pythonPackages.docker_registry}/bin/docker-registry"; User = "docker-registry"; Group = "docker"; PermissionsStartOnly = true; }; preStart = '' mkdir -p ${cfg.storagePath} if [ "$(id -u)" = 0 ]; then chown -R docker-registry:docker ${cfg.storagePath} fi ''; postStart = '' until ${pkgs.curl}/bin/curl -s -o /dev/null 'http://${cfg.host}:${toString cfg.port}/'; do sleep 1; done ''; }; users.extraGroups.docker.gid = mkDefault config.ids.gids.docker; users.extraUsers.docker-registry.uid = config.ids.uids.docker-registry; }; }