{
    "distSpecVersion": "1.0.1",
    "storage": {
        "dedupe": true,
        "gc": true,
        "gcDelay": "1h",
        "gcInterval": "6h",
        "rootDirectory": "/var/lib/registry"
    },
    "http": {
        "address": "192.168.0.0",
        "port": "2000",
        "externalUrl": "https://zot.whatever.org", 
        "realm": "zot",
        "auth": {
            "htpasswd": {
                "path": "/etc/zot/htpasswd"
            },
            "openid": {
                "providers": {
                    "oidc": {
                        "name": "Company SSO or whatever",
                        "issuer": "https://sso.whatever.org/oidc",
                        "clientid": "CLIENT_ID",
                        "clientsecret": "CLIENT_SECRET",
                        "keypath": "",
                        "scopes": [
                            "openid",
                            "profile",
                            "email"
                        ]
                    }
                }
            },
            "failDelay": 1
        },
        "accessControl": {
            "repositories": {
                "*": {
                    "policies": [
                        {
                            "users": [
                                "your-email@whatever.org"
                            ],
                            "actions": [
                                "read",
                                "create",
                                "update",
                                "delete"
                            ]
                        }
                    ],
                    "defaultPolicy": [
                        "read"
                    ],
                    "anonymousPolicy": [
                        "read"
                    ]
                }
            }
        }
    },
    "log": {
        "level": "debug",
        "output": "/var/log/zot/zot.log",
        "audit": "/var/log/zot/zot-audit.log"
    },
    "extensions": {
        "ui": {
            "enable": true
        },
        "search": {
            "enable": true,
            "cve": {
                "updateInterval": "24h"
            }
        },
        "sync": {
            "enable": false,
            "registries": [
                {
                    "urls": [
                        "https://mirror.gcr.io/library"
                    ],
                    "onDemand": true,
                    "maxRetries": 3,
                    "retryDelay": "5m",
                    "pollInterval": "6h"
                },
                {
                    "urls": [
                        "https://docker.io/library"
                    ],
                    "onDemand": true
                }
            ]
        },
        "scrub": {
            "interval": "24h"
        }
    }
}