fix: use and reference credentialfile

tasks/config.yaml

@@ -4,6 +4,17 @@
 - name: "configure zot"
   block:
 
+    # create sync credentials file
+    - name: "create sync credentials file"
+      ansible.builtin.template:
+        src: "zot/sync-credentials.json.j2"
+        dest: "/etc/zot/sync-credentials.json"
+        owner: "root"
+        group: "root"
+        mode: "0600"
+      notify: "restart zot"
+      when: "zot_dockerhub_username is defined and zot_dockerhub_password is defined"
+
     # create config file
     - name: "create config file"
       ansible.builtin.template:

templates/zot/config.json.j2

@@ -41,15 +41,12 @@
     },
     "sync": {
       "enable": true,
+{% if zot_dockerhub_username is defined and zot_dockerhub_password is defined %}
+      "credentialsFile": "/etc/zot/sync-credentials.json",
+{% endif %}
       "registries": [
         {
           "urls": ["https://registry-1.docker.io"],
-{% if zot_dockerhub_username is defined and zot_dockerhub_password is defined %}
-          "credentials": {
-            "username": "{{ zot_dockerhub_username }}",
-            "password": "{{ zot_dockerhub_password }}"
-          },
-{% endif %}
           "onDemand": true,
           "tlsVerify": true,
           "maxRetries": 3,

templates/zot/sync-credentials.json.j2

@@ -0,0 +1,6 @@
+{
+  "registry-1.docker.io": {
+    "username": "{{ zot_dockerhub_username }}",
+    "password": "{{ zot_dockerhub_password }}"
+  }
+}