infra/modules/docker-registry
Viktor Barzin 3f0ecda737 harden pull-through cache: intercept errors, reduce lock timeout, add healthz
- Add proxy_intercept_errors + error_page for 502/503/504 on blob locations
  to prevent caching truncated upstream responses (root cause of repeated
  ImagePullBackOff across services)
- Reduce proxy_cache_lock_timeout from 15m to 5m — fail fast, let containerd
  retry instead of all concurrent pulls waiting on a failed first download
- Add proxy_cache_valid any 0 — never cache error responses
- Add /healthz endpoints on Docker Hub and GHCR servers
- Add draintimeout and proxy.ttl to registry proxy configs
2026-03-23 11:33:06 +02:00
..
cleanup-tags.sh [ci skip] Rebuild docker-registry with nginx serialization on all ports 2026-02-22 21:45:53 +00:00
config-private.yml add htpasswd auth to private docker registry + expose at registry.viktorbarzin.me 2026-03-22 22:10:10 +02:00
config-proxy.yaml.tpl harden pull-through cache: intercept errors, reduce lock timeout, add healthz 2026-03-23 11:33:06 +02:00
config.yaml harden pull-through cache: intercept errors, reduce lock timeout, add healthz 2026-03-23 11:33:06 +02:00
docker-compose.yml add htpasswd auth to private docker registry + expose at registry.viktorbarzin.me 2026-03-22 22:10:10 +02:00
nginx_registry.conf harden pull-through cache: intercept errors, reduce lock timeout, add healthz 2026-03-23 11:33:06 +02:00