zot/examples/config-policy.json

{
  "distSpecVersion": "1.0.1-dev",
  "storage": {
    "rootDirectory": "/tmp/zot"
  },
  "http": {
    "address": "127.0.0.1",
    "port": "8080",
    "realm": "zot",
    "auth": {
      "htpasswd": {
        "path": "test/data/htpasswd"
      },
      "failDelay": 1
    },
    "accessControl": {
      "**": {
        "anonymousPolicy": ["read"],
        "policies": [
          {
            "users": [
              "charlie"
            ],
            "actions": [
              "read",
              "create",
              "update"
            ]
          }
        ],
        "defaultPolicy": [
          "read",
          "create",
          "delete",
          "detectManifestCollision"
        ]
      },
      "tmp/**": {
        "defaultPolicy": [
          "read",
          "create",
          "update"
        ]
      },
      "infra/**": {
        "policies": [
          {
            "users": [
              "alice",
              "bob"
            ],
            "actions": [
              "create",
              "read",
              "update",
              "delete"
            ]
          },
          {
            "users": [
              "mallory"
            ],
            "actions": [
              "create",
              "read"
            ]
          }
        ],
        "defaultPolicy": [
          "read"
        ]
      },
      "repos2/repo": {
        "policies": [
          {
            "users": [
              "charlie"
            ],
            "actions": [
              "read",
              "create"
            ]
          },
          {
            "users": [
              "mallory"
            ],
            "actions": [
              "create",
              "read"
            ]
          }
        ],
        "defaultPolicy": [
          "read"
        ]
      },
      "adminPolicy": {
        "users": [
          "admin"
        ],
        "actions": [
          "read",
          "create",
          "update",
          "delete"
        ]
      }
    }
  },
  "log": {
    "level": "debug",
    "output": "/tmp/zot.log"
  }
}