soroush.asadi
7321c59e43
provision.sh: Docker proxy defaults to registry-1.docker.io (works directly from VPS). Set DOCKER_MIRROR_URL/USER/PASS env vars to route through docker-mirror.liara.ir once Liara credentials are obtained. update-docker-upstream.sh: swap Docker proxy upstream at any time without re-running the full provision (useful after getting Liara credentials). indexType auto-selects: HUB for docker.io direct, REGISTRY for Liara/Harbor. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
74 lines
2.5 KiB
Bash
74 lines
2.5 KiB
Bash
#!/usr/bin/env bash
|
|
# ─────────────────────────────────────────────────────────────────────────────
|
|
# Switch the Nexus Docker proxy upstream to Liara mirror (or back to Docker Hub)
|
|
#
|
|
# Usage (with Liara):
|
|
# DOCKER_MIRROR_URL=https://docker-mirror.liara.ir \
|
|
# DOCKER_MIRROR_USER=your-liara-email \
|
|
# DOCKER_MIRROR_PASS=your-liara-token \
|
|
# NEXUS_ADMIN_PASS=Mirror@2024! \
|
|
# ./mirrors/nexus/update-docker-upstream.sh
|
|
#
|
|
# Usage (back to Docker Hub direct):
|
|
# NEXUS_ADMIN_PASS=Mirror@2024! ./mirrors/nexus/update-docker-upstream.sh
|
|
# ─────────────────────────────────────────────────────────────────────────────
|
|
set -euo pipefail
|
|
|
|
NEXUS_URL="http://localhost:8081"
|
|
ADMIN_PASS="${NEXUS_ADMIN_PASS:-Mirror@2024!}"
|
|
AUTH="-u admin:$ADMIN_PASS"
|
|
|
|
DOCKER_UPSTREAM="${DOCKER_MIRROR_URL:-https://registry-1.docker.io}"
|
|
DOCKER_USER="${DOCKER_MIRROR_USER:-}"
|
|
DOCKER_PASS="${DOCKER_MIRROR_PASS:-}"
|
|
|
|
if [ -n "$DOCKER_USER" ] && [ -n "$DOCKER_PASS" ]; then
|
|
AUTH_BLOCK='"authentication":{"type":"username","username":"'"$DOCKER_USER"'","password":"'"$DOCKER_PASS"'"},'
|
|
INDEX_TYPE="REGISTRY"
|
|
echo "🐳 Switching Docker proxy → $DOCKER_UPSTREAM (with auth)"
|
|
else
|
|
AUTH_BLOCK=""
|
|
INDEX_TYPE="HUB"
|
|
echo "🐳 Switching Docker proxy → $DOCKER_UPSTREAM (no auth)"
|
|
fi
|
|
|
|
HTTP=$(curl -s -o /dev/null -w "%{http_code}" $AUTH \
|
|
-X PUT "$NEXUS_URL/service/rest/v1/repositories/docker/proxy/docker-hub-proxy" \
|
|
-H "Content-Type: application/json" \
|
|
-d '{
|
|
"name": "docker-hub-proxy",
|
|
"online": true,
|
|
"storage": {
|
|
"blobStoreName": "default",
|
|
"strictContentTypeValidation": true
|
|
},
|
|
"proxy": {
|
|
"remoteUrl": "'"$DOCKER_UPSTREAM"'",
|
|
"contentMaxAge": 1440,
|
|
"metadataMaxAge": 1440
|
|
},
|
|
"negativeCache": { "enabled": true, "timeToLive": 1440 },
|
|
"httpClient": {
|
|
"blocked": false,
|
|
"autoBlock": true,
|
|
'"$AUTH_BLOCK"'
|
|
"connection": { "useTrustStore": false }
|
|
},
|
|
"docker": {
|
|
"v1Enabled": false,
|
|
"forceBasicAuth": false,
|
|
"httpPort": 8083
|
|
},
|
|
"dockerProxy": {
|
|
"indexType": "'"$INDEX_TYPE"'",
|
|
"cacheForeignLayers": false
|
|
}
|
|
}')
|
|
|
|
if [ "$HTTP" = "204" ]; then
|
|
echo "✅ docker-hub-proxy updated → $DOCKER_UPSTREAM"
|
|
else
|
|
echo "❌ Update failed — HTTP $HTTP"
|
|
exit 1
|
|
fi
|