# https://verdaccio.org/docs/configuration#uplinks # A list of other known repositories we can talk to uplinks: npmjs: url: https://registry.npmjs.org/ yarn: url: https://registry.yarnpkg.com/ taobao: url: https://registry.npmmirror.com/
# Learn how to protect your packages # https://verdaccio.org/docs/protect-your-dependencies/ # https://verdaccio.org/docs/configuration#packages packages: '@*/*': # scoped packages access: $all publish: $authenticated unpublish: $authenticated proxy: taobao
'**': # Allow all users (including non-authenticated users) to read and # publish all packages # # You can specify usernames/groupnames (depending on your auth plugin) # and three keywords: "$all", "$anonymous", "$authenticated" access: $all
# Allow all known users to publish/unpublish packages # (anyone can register by default, remember?) publish: $authenticated unpublish: $authenticated
# if package is not available locally, proxy requests to 'npmjs' registry proxy: taobao # To improve your security configuration and avoid dependency confusion # consider removing the proxy property for private packages # https://verdaccio.org/docs/best#remove-proxy-to-increase-security-at-private-packages
# https://verdaccio.org/docs/configuration#server # You can specify the HTTP/1.1 server keep alive timeout in seconds for incoming connections. # A value of 0 makes the http server behave similarly to Node.js versions prior to 8.0.0, which did not have a # keep-alive timeout. # WORKAROUND: Through given configuration you can work around the following issue: # https://github.com/verdaccio/verdaccio/issues/301. Set to 0 in case 60 is not enough. server: keepAliveTimeout: 60 # The pluginPrefix replaces the default plugins prefix which is `verdaccio`, please don't include `-`. If `something` is provided # the resolve package will be `something-xxxx`. # pluginPrefix: something # A regex for the password validation /.{3}$/ (3 characters min) # An example to limit to 10 characters minimum # passwordValidationRegex: /.{10}$/ # Allow `req.ip` to resolve properly when Verdaccio is behind a proxy or load-balancer # See: https://expressjs.com/en/guide/behind-proxies.html # trustProxy: '127.0.0.1'