Settings

NORA can be configured via environment variables, config.toml, or CLI flags. Environment variables take precedence over config file values.

Environment Variables

Server

Variable	Default	Description
`NORA_HOST`	`127.0.0.1`	Bind address
`NORA_PORT`	`4000`	Listen port
`NORA_BODY_LIMIT_MB`	`2048`	Max request body size in MB
`RUST_LOG`	`info`	Log level (`debug`, `info`, `warn`, `error`)

Storage

Variable	Default	Description
`NORA_STORAGE_MODE`	`local`	Storage backend: `local` or `s3`
`NORA_STORAGE_PATH`	`data/storage`	Local storage path
`NORA_STORAGE_S3_URL`	—	S3-compatible endpoint URL
`NORA_STORAGE_BUCKET`	`registry`	S3 bucket name

Authentication

Variable	Default	Description
`NORA_AUTH_ENABLED`	`false`	Enable authentication
`NORA_AUTH_HTPASSWD_FILE`	`users.htpasswd`	Path to htpasswd file
`NORA_AUTH_TOKEN_STORAGE`	`data/tokens`	Directory for API token storage

See the Authentication Guide for setup instructions.

Rate Limits

Variable	Default	Description
`NORA_RATE_LIMIT_ENABLED`	`true`	Enable/disable rate limiting
`NORA_RATE_LIMIT_AUTH_RPS`	`1`	Auth requests per second
`NORA_RATE_LIMIT_AUTH_BURST`	`5`	Auth burst size
`NORA_RATE_LIMIT_UPLOAD_RPS`	`200`	Upload requests per second
`NORA_RATE_LIMIT_UPLOAD_BURST`	`500`	Upload burst size
`NORA_RATE_LIMIT_GENERAL_RPS`	`100`	General requests per second
`NORA_RATE_LIMIT_GENERAL_BURST`	`200`	General burst size

See Rate Limits for tuning guidelines.

Docker Proxy

Variable	Default	Description
`NORA_DOCKER_UPSTREAMS`	`https://registry-1.docker.io`	Comma-separated upstream registries
`NORA_DOCKER_PROXY_TIMEOUT`	`60`	Upstream request timeout (seconds)

See Docker Proxy for usage examples and pull-through cache setup.

Secrets

Variable	Default	Description
`NORA_SECRETS_PROVIDER`	`env`	Secrets provider (`env`)
`NORA_SECRETS_CLEAR_ENV`	`false`	Clear env vars after reading

config.toml

NORA looks for config.toml in the current directory. All settings can also be configured here:

[server]
host = 0.0.0.0
port = 4000

[storage]
mode = local
path = data/storage

# S3 storage (uncomment to use)
# mode = s3
# s3_url = https://s3.amazonaws.com
# bucket = my-registry

[auth]
enabled = true
htpasswd_file = users.htpasswd
token_storage = data/tokens

[rate_limit]
enabled = true
auth_rps = 1
auth_burst = 5
upload_rps = 200
upload_burst = 500
general_rps = 100
general_burst = 200

[secrets]
provider = env
clear_env = false

Docker Compose

Complete production example:

services:
  nora:
    image: ghcr.io/getnora-io/nora:latest
    ports:
      - 4000:4000
    volumes:
      - nora-data:/data
      - ./users.htpasswd:/data/users.htpasswd:ro
    environment:
      - RUST_LOG=info
      - NORA_HOST=0.0.0.0
      - NORA_PORT=4000
      - NORA_AUTH_ENABLED=true
      - NORA_BODY_LIMIT_MB=4096
    restart: unless-stopped

volumes:
  nora-data:

Endpoints

URL	Description
`/ui/`	Web UI
`/api-docs`	Swagger UI (OpenAPI)
`/health`	Health check
`/ready`	Readiness probe
`/metrics`	Prometheus metrics
`/v2/`	Docker Registry v2
`/maven2/`	Maven repository
`/npm/`	npm registry
`/cargo/`	Cargo registry
`/simple/`	PyPI index