# Extension Registry Configuration - Enterprise Example
# High-availability, multi-source, multi-registry production deployment

[server]
enable_compression = true
enable_cors = true
host = "0.0.0.0"
port = 8082
workers = 8

# Primary internal Gitea instance
[[sources.gitea]]
id = "primary-internal-gitea"
organization = "platform-extensions"
timeout_seconds = 30
token_path = "/etc/secrets/gitea-primary-token.txt"
url = "https://gitea.internal.company.com"
verify_ssl = true

# Secondary internal Gitea (failover)
[[sources.gitea]]
id = "secondary-internal-gitea"
organization = "platform-extensions"
timeout_seconds = 30
token_path = "/etc/secrets/gitea-secondary-token.txt"
url = "https://gitea-secondary.internal.company.com"
verify_ssl = true

# Forgejo for community extensions
[[sources.forgejo]]
id = "enterprise-forgejo"
organization = "platform"
timeout_seconds = 30
token_path = "/etc/secrets/forgejo-token.txt"
url = "https://forge.company.com"
verify_ssl = true

# GitHub organization
[[sources.github]]
id = "company-github"
organization = "company-platform"
timeout_seconds = 30
token_path = "/etc/secrets/github-token.txt"
verify_ssl = true

# Primary enterprise OCI registry (Zot)
[[distributions.oci]]
id = "primary-oci-zot"
namespace = "platform/extensions"
registry = "zot.internal.company.com"
timeout_seconds = 30
verify_ssl = true

# Secondary enterprise OCI registry (Harbor)
[[distributions.oci]]
auth_token_path = "/etc/secrets/harbor-token.txt"
id = "secondary-oci-harbor"
namespace = "platform"
registry = "harbor.internal.company.com"
timeout_seconds = 30
verify_ssl = true

# Public Docker Hub for external distribution
[[distributions.oci]]
auth_token_path = "/etc/secrets/docker-hub-token.txt"
id = "public-docker-hub"
namespace = "company-open-source"
registry = "docker.io"
timeout_seconds = 30
verify_ssl = true

# Public GHCR for open-source projects
[[distributions.oci]]
auth_token_path = "/etc/secrets/ghcr-token.txt"
id = "public-ghcr"
namespace = "company-open-source"
registry = "ghcr.io"
timeout_seconds = 30
verify_ssl = true

# Caching configuration for high-traffic enterprise environment
[cache]
capacity = 5000
enable_list_cache = true
enable_metadata_cache = true
ttl_seconds = 600