1. add npm

2. 创建全局docker-compose 文件

.github/workflows/gitleaks.yaml

@@ -0,0 +1,13 @@
+name: gitleaks
+on: [push]
+jobs:
+  scan:
+    name: gitleaks
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+      - uses: gitleaks/gitleaks-action@v2
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

docker/docker-compose.yaml

@@ -0,0 +1,69 @@
+version: "3"
+services:
+  k8sgcr:
+    image: "registry:2.8.3"
+    container_name: "k8sgcr"
+    restart: "always"
+    volumes:
+      - "/etc/localtime:/etc/localtime"
+      - "./k8sgcr/data:/var/lib/registry"
+      - "./k8sgcr/config.yml:/etc/docker/registry/config.yml"
+    ports:
+      - "5004:5000"
+
+  ghcr:
+    image: "registry:2.8.3"
+    container_name: "ghcr"
+    restart: "always"
+    volumes:
+      - "/etc/localtime:/etc/localtime"
+      - "./ghcr/data:/var/lib/registry"
+      - "./ghcr/config.yml:/etc/docker/registry/config.yml"
+    ports:
+      - "5001:5000"
+
+  gcr:
+    image: "registry:2.8.3"
+    container_name: "gcr"
+    restart: "always"
+    volumes:
+      - "/etc/localtime:/etc/localtime"
+      - "./gcr/data:/var/lib/registry"
+      - "./gcr/config.yml:/etc/docker/registry/config.yml"
+    ports:
+      - "5003:5000"
+
+  dockerhub:
+    image: "registry:2.8.3"
+    container_name: "dockerhub"
+    restart: "always"
+    volumes:
+      - "/etc/localtime:/etc/localtime"
+      - "./dockerhub/data:/var/lib/registry"
+      - "./dockerhub/config.yml:/etc/docker/registry/config.yml"
+    ports:
+      - "5000:5000"
+
+  registryk8s:
+    image: "registry:2.8.3"
+    container_name: "registryk8s"
+    restart: "always"
+    volumes:
+      - "/etc/localtime:/etc/localtime"
+      - "./registryk8s/data:/var/lib/registry"
+      - "./registryk8s/config.yml:/etc/docker/registry/config.yml"
+    ports:
+      - "5005:5000"
+
+  # nginx-proxy-manager:
+  #   image: 'jc21/nginx-proxy-manager:2.11.3'
+  #   container_name: nginx-proxy-manager
+  #   restart: always
+  #   ports:
+  #     - '80:80'
+  #     - '82:81'
+  #     - '443:443'
+  #   volumes:
+  #     - "/etc/localtime:/etc/localtime"
+  #     - ./npm/data:/data
+  #     - ./npm/letsencrypt:/etc/letsencrypt

docker/dockerhub/docker-compose.yaml

@@ -1,7 +1,7 @@
 version: "3"
 services:
   dockerhub:
-    image: "registry:2.8.1"
+    image: "registry:2.8.3"
     container_name: "dockerhub"
     restart: "always"
     volumes:

docker/gcr/docker-compose.yaml

@@ -1,7 +1,7 @@
 version: "3"
 services:
   gcr:
-    image: "registry:2.8.1"
+    image: "registry:2.8.3"
     container_name: "gcr"
     restart: "always"
     volumes:

docker/ghcr/docker-compose.yaml

@@ -1,7 +1,7 @@
 version: "3"
 services:
   ghcr:
-    image: "registry:2.8.1"
+    image: "registry:2.8.3"
     container_name: "ghcr"
     restart: "always"
     volumes:

docker/k8sgcr/docker-compose.yaml

@@ -1,7 +1,7 @@
 version: "3"
 services:
   k8sgcr:
-    image: "registry:2.8.1"
+    image: "registry:2.8.3"
     container_name: "k8sgcr"
     restart: "always"
     volumes:

docker/quay/docker-compose.yaml

@@ -1,7 +1,7 @@
 version: "3"
 services:
   quay:
-    image: "registry:2.8.1"
+    image: "registry:2.8.3"
     container_name: "quay"
     restart: "always"
     volumes:

docker/registryk8s/docker-compose.yaml

@@ -1,7 +1,7 @@
 version: "3"
 services:
   registryk8s:
-    image: "registry:2.8.1"
+    image: "registry:2.8.3"
     container_name: "registryk8s"
     restart: "always"
     volumes:

kubernetes/dockerhub/config.yml

@@ -0,0 +1,16 @@
+version: 0.1
+storage:
+  filesystem:
+    rootdirectory: /var/lib/registry
+  delete:
+    enabled: true
+  maintenance:
+    uploadpurging:
+      enabled: true
+      age: 168h
+      dryrun: false
+      interval: 45m
+http:
+  addr: 0.0.0.0:5000
+proxy:
+  remoteurl: https://registry-1.docker.io

kubernetes/dockerhub/kustomization.yaml

@@ -0,0 +1,10 @@
+resources:
+- sts.yaml
+- svc.yaml
+
+configMapGenerator:
+- name: dockerhub-cnf
+  files:
+  - config.yml
+  options:
+    disableNameSuffixHash: true

kubernetes/dockerhub/sts.yaml

@@ -0,0 +1,46 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: dockerhub
+  namespace: registry
+spec:
+  selector:
+    matchLabels:
+      app: dockerhub
+  serviceName: dockerhub
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: dockerhub
+    spec:
+      containers:
+      - name: dockerhub
+        image: registry:2.8.1
+        ports:
+        - containerPort: 5000
+          name: dockerhub
+        volumeMounts:
+        - name: dockerhub-data
+          mountPath: /var/lib/registry
+        - name: timezone
+          mountPath: /etc/localtime
+          readOnly: true
+        - name: dockerhub-cnf
+          mountPath: /etc/docker/registry/config.yml
+          subPath: config.yml
+      volumes:
+        - name: dockerhub-cnf
+          configMap:
+            name: dockerhub-cnf
+        - name: timezone
+          hostPath: 
+            path: /usr/share/zoneinfo/Asia/Shanghai  
+  volumeClaimTemplates:
+  - metadata:
+      name: dockerhub-data
+    spec:
+      accessModes: [ "ReadWriteOnce" ]
+      resources:
+        requests:
+          storage: 50Gi

kubernetes/dockerhub/svc.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: dockerhub
+  namespace: registry
+spec:
+  selector:
+    app: dockerhub
+  ports:
+  - port: 5000
+    targetPort: 5000

kubernetes/gcr/config.yml

@@ -0,0 +1,16 @@
+version: 0.1
+storage:
+  filesystem:
+    rootdirectory: /var/lib/registry
+  delete:
+    enabled: true
+  maintenance:
+    uploadpurging:
+      enabled: true
+      age: 168h
+      dryrun: false
+      interval: 1m
+http:
+  addr: 0.0.0.0:5000
+proxy:
+  remoteurl: https://gcr.io

kubernetes/gcr/kustomization.yaml

@@ -0,0 +1,10 @@
+resources:
+- sts.yaml
+- svc.yaml
+
+configMapGenerator:
+- name: gcr-cnf
+  files:
+  - config.yml
+  options:
+    disableNameSuffixHash: true

kubernetes/gcr/sts.yaml

@@ -0,0 +1,46 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: gcr
+  namespace: registry
+spec:
+  selector:
+    matchLabels:
+      app: gcr
+  serviceName: gcr
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: gcr
+    spec:
+      containers:
+      - name: gcr
+        image: registry:2.8.1
+        ports:
+        - containerPort: 5000
+          name: gcr
+        volumeMounts:
+        - name: gcr-data
+          mountPath: /var/lib/registry
+        - name: timezone
+          mountPath: /etc/localtime
+          readOnly: true
+        - name: gcr-cnf
+          mountPath: /etc/docker/registry/config.yml
+          subPath: config.yml
+      volumes:
+        - name: gcr-cnf
+          configMap:
+            name: gcr-cnf
+        - name: timezone
+          hostPath: 
+            path: /usr/share/zoneinfo/Asia/Shanghai  
+  volumeClaimTemplates:
+  - metadata:
+      name: gcr-data
+    spec:
+      accessModes: [ "ReadWriteOnce" ]
+      resources:
+        requests:
+          storage: 50Gi

kubernetes/gcr/svc.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: gcr
+  namespace: registry
+spec:
+  selector:
+    app: gcr
+  ports:
+  - port: 5000
+    targetPort: 5000

kubernetes/ghcr/config.yml

@@ -0,0 +1,16 @@
+version: 0.1
+storage:
+  filesystem:
+    rootdirectory: /var/lib/registry
+  delete:
+    enabled: true
+  maintenance:
+    uploadpurging:
+      enabled: true
+      age: 168h
+      dryrun: false
+      interval: 1m
+http:
+  addr: 0.0.0.0:5000
+proxy:
+  remoteurl: https://ghcr.io

kubernetes/ghcr/kustomization.yaml

@@ -0,0 +1,10 @@
+resources:
+- sts.yaml
+- svc.yaml
+
+configMapGenerator:
+- name: ghcr-cnf
+  files:
+  - config.yml
+  options:
+    disableNameSuffixHash: true

kubernetes/ghcr/sts.yaml

@@ -0,0 +1,46 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: ghcr
+  namespace: registry
+spec:
+  selector:
+    matchLabels:
+      app: ghcr
+  serviceName: ghcr
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: ghcr
+    spec:
+      containers:
+      - name: ghcr
+        image: registry:2.8.1
+        ports:
+        - containerPort: 5000
+          name: ghcr
+        volumeMounts:
+        - name: ghcr-data
+          mountPath: /var/lib/registry
+        - name: timezone
+          mountPath: /etc/localtime
+          readOnly: true
+        - name: ghcr-cnf
+          mountPath: /etc/docker/registry/config.yml
+          subPath: config.yml
+      volumes:
+        - name: ghcr-cnf
+          configMap:
+            name: ghcr-cnf
+        - name: timezone
+          hostPath: 
+            path: /usr/share/zoneinfo/Asia/Shanghai  
+  volumeClaimTemplates:
+  - metadata:
+      name: ghcr-data
+    spec:
+      accessModes: [ "ReadWriteOnce" ]
+      resources:
+        requests:
+          storage: 50Gi

kubernetes/ghcr/svc.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: ghcr
+  namespace: registry
+spec:
+  selector:
+    app: ghcr
+  ports:
+  - port: 5000
+    targetPort: 5000

kubernetes/ingress.yaml

@@ -0,0 +1,75 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: registry-ingress
+  namespace: registry
+  annotations:
+    kubernetes.io/ingress.class: "nginx"
+    nginx.ingress.kubernetes.io/ssl-passthrough: "true"
+    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+spec:
+  rules:
+  - host: "quay.example.com"
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: quay
+            port:
+              number: 5000
+  - host: "registryk8s.example.com"
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: registryk8s
+            port:
+              number: 5000
+  - host: "gcr.example.com"
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: gcr
+            port:
+              number: 5000
+  - host: "ghcr.example.com"
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: ghcr
+            port:
+              number: 5000
+  - host: "k8sgcr.example.com"
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: k8sgcr
+            port:
+              number: 5000
+  - host: "hub.example.com"
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: dockerhub
+            port:
+              number: 5000
+  tls:
+  - hosts:
+    - example.com
+    secretName: example.com-tls

kubernetes/k8sgcr/config.yml

@@ -0,0 +1,16 @@
+version: 0.1
+storage:
+  filesystem:
+    rootdirectory: /var/lib/registry
+  delete:
+    enabled: true
+  maintenance:
+    uploadpurging:
+      enabled: true
+      age: 168h
+      dryrun: false
+      interval: 1m
+http:
+  addr: 0.0.0.0:5000
+proxy:
+  remoteurl: https://k8s.gcr.io

kubernetes/k8sgcr/kustomization.yaml

@@ -0,0 +1,10 @@
+resources:
+- sts.yaml
+- svc.yaml
+
+configMapGenerator:
+- name: k8sgcr-cnf
+  files:
+  - config.yml
+  options:
+    disableNameSuffixHash: true

kubernetes/k8sgcr/sts.yaml

@@ -0,0 +1,46 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: k8sgcr
+  namespace: registry
+spec:
+  selector:
+    matchLabels:
+      app: k8sgcr
+  serviceName: k8sgcr
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: k8sgcr
+    spec:
+      containers:
+      - name: k8sgcr
+        image: registry:2.8.1
+        ports:
+        - containerPort: 5000
+          name: k8sgcr
+        volumeMounts:
+        - name: k8sgcr-data
+          mountPath: /var/lib/registry
+        - name: timezone
+          mountPath: /etc/localtime
+          readOnly: true
+        - name: k8sgcr-cnf
+          mountPath: /etc/docker/registry/config.yml
+          subPath: config.yml
+      volumes:
+        - name: k8sgcr-cnf
+          configMap:
+            name: k8sgcr-cnf
+        - name: timezone
+          hostPath: 
+            path: /usr/share/zoneinfo/Asia/Shanghai  
+  volumeClaimTemplates:
+  - metadata:
+      name: k8sgcr-data
+    spec:
+      accessModes: [ "ReadWriteOnce" ]
+      resources:
+        requests:
+          storage: 50Gi

kubernetes/k8sgcr/svc.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: k8sgcr
+  namespace: registry
+spec:
+  selector:
+    app: k8sgcr
+  ports:
+  - port: 5000
+    targetPort: 5000

kubernetes/kustomization.yaml

@@ -0,0 +1,14 @@
+resources:
+- registryk8s
+- quay
+- dockerhub
+- gcr
+- ghcr
+- k8sgcr
+- ingress.yaml
+
+namespace: registry
+
+images:
+- name: registry
+  newTag: 2.8.3

kubernetes/quay/config.yml

@@ -0,0 +1,16 @@
+version: 0.1
+storage:
+  filesystem:
+    rootdirectory: /var/lib/registry
+  delete:
+    enabled: true
+  maintenance:
+    uploadpurging:
+      enabled: true
+      age: 168h
+      dryrun: false
+      interval: 1m
+http:
+  addr: 0.0.0.0:5000
+proxy:
+  remoteurl: https://quay.io

kubernetes/quay/kustomization.yaml

@@ -0,0 +1,10 @@
+resources:
+- sts.yaml
+- svc.yaml
+
+configMapGenerator:
+- name: quay-cnf
+  files:
+  - config.yml
+  options:
+    disableNameSuffixHash: true

kubernetes/quay/sts.yaml

@@ -0,0 +1,46 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: quay
+  namespace: registry
+spec:
+  selector:
+    matchLabels:
+      app: quay
+  serviceName: quay
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: quay
+    spec:
+      containers:
+      - name: quay
+        image: registry:2.8.1
+        ports:
+        - containerPort: 5000
+          name: quay
+        volumeMounts:
+        - name: quay-data
+          mountPath: /var/lib/registry
+        - name: timezone
+          mountPath: /etc/localtime
+          readOnly: true
+        - name: quay-cnf
+          mountPath: /etc/docker/registry/config.yml
+          subPath: config.yml
+      volumes:
+        - name: quay-cnf
+          configMap:
+            name: quay-cnf
+        - name: timezone
+          hostPath: 
+            path: /usr/share/zoneinfo/Asia/Shanghai  
+  volumeClaimTemplates:
+  - metadata:
+      name: quay-data
+    spec:
+      accessModes: [ "ReadWriteOnce" ]
+      resources:
+        requests:
+          storage: 50Gi

kubernetes/quay/svc.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: quay
+  namespace: registry
+spec:
+  selector:
+    app: quay
+  ports:
+  - port: 5000
+    targetPort: 5000

kubernetes/registryk8s/config.yml

@@ -0,0 +1,16 @@
+version: 0.1
+storage:
+  filesystem:
+    rootdirectory: /var/lib/registry
+  delete:
+    enabled: true
+  maintenance:
+    uploadpurging:
+      enabled: true
+      age: 168h
+      dryrun: false
+      interval: 1m
+http:
+  addr: 0.0.0.0:5000
+proxy:
+  remoteurl: https://registry.k8s.io

kubernetes/registryk8s/kustomization.yaml

@@ -0,0 +1,10 @@
+resources:
+- sts.yaml
+- svc.yaml
+
+configMapGenerator:
+- name: registryk8s-cnf
+  files:
+  - config.yml
+  options:
+    disableNameSuffixHash: true

kubernetes/registryk8s/sts.yaml

@@ -0,0 +1,46 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: registryk8s
+  namespace: registry
+spec:
+  selector:
+    matchLabels:
+      app: registryk8s
+  serviceName: registryk8s
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: registryk8s
+    spec:
+      containers:
+      - name: registryk8s
+        image: registry:2.8.1
+        ports:
+        - containerPort: 5000
+          name: registryk8s
+        volumeMounts:
+        - name: registryk8s-data
+          mountPath: /var/lib/registry
+        - name: timezone
+          mountPath: /etc/localtime
+          readOnly: true
+        - name: registryk8s-cnf
+          mountPath: /etc/docker/registry/config.yml
+          subPath: config.yml
+      volumes:
+        - name: registryk8s-cnf
+          configMap:
+            name: registryk8s-cnf
+        - name: timezone
+          hostPath: 
+            path: /usr/share/zoneinfo/Asia/Shanghai  
+  volumeClaimTemplates:
+  - metadata:
+      name: registryk8s-data
+    spec:
+      accessModes: [ "ReadWriteOnce" ]
+      resources:
+        requests:
+          storage: 50Gi

kubernetes/registryk8s/svc.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: registryk8s
+  namespace: registry
+spec:
+  selector:
+    app: registryk8s
+  ports:
+  - port: 5000
+    targetPort: 5000

readme.md

@@ -2,9 +2,17 @@
 
 这是为了方便大家做各个镜像仓库代理的
 
-### 操作
+### Docker教程
 
-你想要代理哪一个仓库就直接进入哪一个文件夹
+进入docker目录
+
+如果你想要启动所有的镜像仓库直接执行 
+
+`docker-compose up -d`
+
+但是你想要单独代理某一个仓库就直接进入那个文件夹
+
+`cd dockerhub`
 
 `docker-compose up -d`
 
@@ -12,6 +20,10 @@
 
 每一个镜像仓库对外的端口都是不一样的，当然你也可以使用nginx统一反向代理一下
 
+### k8s教程
+
+都在用k8s了，还想要教程？
+
 ### 注意
 
 大家可以看下配置文件
@@ -19,3 +31,11 @@
 默认168h小时之后会清理缓存，也就是你拉取的镜像缓存
 
 喜欢的给个star哦！！！！
+
+### 其他教程
+
+`https://51.ruyo.net/18687.html`
+
+### 广告位
+
+我的tg频道 [https://t.me/bboyapp](https://t.me/bboyapp)