feat: add dockerhub credentials

defaults/main.yaml

@@ -3,3 +3,7 @@
 # zot
 # renovate: datasource=github-releases depName=project-zot/zot versioning=pep440
 zot_version: "2.1.16"
+
+# dockerhub credentials (optional, avoids rate limits)
+# zot_dockerhub_username: ""
+# zot_dockerhub_password: ""

tasks/config.yaml

@@ -11,7 +11,7 @@
         dest: "/etc/zot/config.json"
         owner: "root"
         group: "root"
-        mode: "0644"
+        mode: "0600"
       notify: "restart zot"
 
     # create systemd service

templates/zot/config.json.j2

@@ -44,6 +44,12 @@
       "registries": [
         {
           "urls": ["https://registry-1.docker.io"],
+{% if zot_dockerhub_username is defined and zot_dockerhub_password is defined %}
+          "credentials": {
+            "username": "{{ zot_dockerhub_username }}",
+            "password": "{{ zot_dockerhub_password }}"
+          },
+{% endif %}
           "onDemand": true,
           "tlsVerify": true,
           "maxRetries": 3,