# Talos Machine-Config-Patch: Images aus registry.local (Forgejo-Registry hinter nginx, self-signed) ziehen
#
# Anwenden (pro Node, kein Reboot nötig):
#   talosctl patch machineconfig --nodes 172.25.64.74 --patch @talos/registry-patch.yaml
#
# <REGISTRY_IP>  = IP des nginx vor der Forgejo-Registry
# <CA_BASE64>    = base64 -w0 nginx_ssl/nginx.crt
machine:
  network:
    extraHostEntries:
      - ip: <REGISTRY_IP>
        aliases:
          - registry.local
  registries:
    mirrors:
      registry.local:
        endpoints:
          - https://registry.local
    config:
      registry.local:
        tls:
          ca: <CA_BASE64>