Add Docker Registry configuration for k8s-server with TLS and authentication

2025-12-16 10:47:15 +01:00
parent a83976c615
commit dd943ffd16
6 changed files with 310 additions and 0 deletions
@@ -12,6 +12,7 @@
      "--cluster-init"
      "--disable=traefik"
      "--flannel-backend=vxlan"
+      "--tls-san=k8s.home.lindenfelser.de"
    ];
  };

@@ -22,9 +23,27 @@
  networking.firewall.allowedTCPPorts = [
    6443  # Kubernetes API
    10250 # Kubelet metrics
+    5000  # Docker Registry
  ];

  networking.firewall.allowedUDPPorts = [
    8472  # flannel VXLAN
  ];
+
+  ########################################
+  # Containerd registry configuration
+  ########################################
+  environment.etc."rancher/k3s/registries.yaml" = {
+    text = ''
+      mirrors:
+        registry.home.lindenfelser.de:
+          endpoint:
+            - "https://10.202.82.7:5000"
+      configs:
+        "10.202.82.7:5000":
+          tls:
+            insecure_skip_verify: true
+    '';
+    mode = "0644";
+  };
 }