# Ansible Role: Zot

Install and configure [Zot](https://zotregistry.dev/) - an OCI-native container image registry.

## Variables

| Variable               | Required | Default   | Description                                            |
| ---------------------- | -------- | --------- | ------------------------------------------------------ |
| `zot_version`          | No       | `2.1.16`  | Zot release version to install                         |
| `zot_cve_scanning`     | No       | `false`   | Enable CVE scanning of images                          |
| `zot_sync_credentials` | No       | undefined | List of sync registry credentials to avoid rate limits |

## Example

```yaml
zot_sync_credentials:
  - name: "dockerhub"
    registry: "registry-1.docker.io"
    username: "your-dockerhub-username"
    password: "your-dockerhub-password"
```

## Configuration

The role deploys Zot with the following defaults:

- **Bind address:** `127.0.0.1:5000`
- **Storage:** `/var/lib/zot`
- **Config:** `/etc/zot/config.json`
- **Extensions:** UI and search (with CVE updates every 24h) enabled
- **Service:** systemd unit on Debian-family systems