# Docker Compose Updater Configuration
# This configuration determines how the updater behaves

# Paths to scan for Docker Compose files
compose_paths:
  - "/app/compose-files"
  - "./docker-compose.yml"
  - "./compose.yml"

# Cron expression for when to run updates
# Default: Daily at 2 AM UTC
schedule: "0 0 2 * * *"

# Registry configurations
# All registries use the standard Docker Registry v2 API. Public repositories need
# no credentials: the updater requests an anonymous pull token when challenged.
# Defaults for docker.io and ghcr.io are filled in for any entry left out here.
registries:
  "docker.io":
    url: "https://registry-1.docker.io"
    # Docker Hub validates the basic-auth username, so a personal access token
    # only works alongside the account that owns it. Both are optional; without
    # them public images are still read anonymously.
    # username: "your-docker-hub-username"
    # auth_token: "${DOCKERHUB_TOKEN}"

  "ghcr.io":
    url: "https://ghcr.io"
    auth_token: "${GITHUB_TOKEN}"
    # GitHub token must have 'read:packages' scope and access to the target repositories
    # `username` is not needed here: the token itself carries the identity

  "lscr.io":
    url: "https://lscr.io"

  "registry.gitlab.com":
    url: "https://registry.gitlab.com"
    auth_token: "${GITLAB_TOKEN}"

  # Add any custom registry following the same pattern:
  # "my-registry.company.com":
  #   url: "https://my-registry.company.com"
  #   auth_token: "${CUSTOM_REGISTRY_TOKEN}"

# Update strategy
# Options: LatestPatchOfPreviousMinor (default), Latest
update_strategy: "LatestPatchOfPreviousMinor"

# Images to ignore (substring matching)
ignore_images: []

dry_run: false