provisioning/config/examples/extension-registry.multi-backend.example.toml

# Extension Registry Configuration - Multi-Backend Example
# This example demonstrates the new multi-instance architecture supporting
# multiple Git-based sources (Gitea, Forgejo, GitHub) and multiple OCI registries

[server]
enable_compression = true
enable_cors = false
host = "0.0.0.0"
port = 8082
workers = 4

# Multiple Git-based source backends
# Internal Gitea instance for private extensions
[[sources.gitea]]
id = "internal-gitea"
organization = "provisioning"
timeout_seconds = 30
token_path = "/etc/secrets/gitea-internal-token.txt"
url = "https://gitea.internal.example.com"
verify_ssl = true

# Public Gitea instance for community extensions
[[sources.gitea]]
id = "public-gitea"
organization = "provisioning-extensions"
timeout_seconds = 30
token_path = "/etc/secrets/gitea-public-token.txt"
url = "https://gitea.public.example.com"
verify_ssl = true

# Forgejo sources (Git-compatible)
[[sources.forgejo]]
id = "community-forgejo"
organization = "provisioning"
timeout_seconds = 30
token_path = "/etc/secrets/forgejo-token.txt"
url = "https://forgejo.community.example.com"
verify_ssl = true

# GitHub sources
[[sources.github]]
id = "org-github"
organization = "my-organization"
timeout_seconds = 30
token_path = "/etc/secrets/github-token.txt"
verify_ssl = true

# Multiple OCI distribution registries
# Internal Zot registry
[[distributions.oci]]
id = "internal-zot"
namespace = "provisioning/extensions"
registry = "zot.internal.example.com"
timeout_seconds = 30
verify_ssl = true

# Public Harbor registry
[[distributions.oci]]
auth_token_path = "/etc/secrets/harbor-token.txt"
id = "public-harbor"
namespace = "provisioning"
registry = "harbor.public.example.com"
timeout_seconds = 30
verify_ssl = true

# Docker Hub
[[distributions.oci]]
auth_token_path = "/etc/secrets/docker-hub-token.txt"
id = "docker-hub"
namespace = "myorg"
registry = "docker.io"
timeout_seconds = 30
verify_ssl = true

# GHCR (GitHub Container Registry)
[[distributions.oci]]
auth_token_path = "/etc/secrets/ghcr-token.txt"
id = "ghcr"
namespace = "my-organization"
registry = "ghcr.io"
timeout_seconds = 30
verify_ssl = true

# Caching configuration
[cache]
capacity = 1000
enable_list_cache = true
enable_metadata_cache = true
ttl_seconds = 300