googleharbor

Understand the default configuration

Harbor configuration files

Each Harbor service uses different configuration files. The most relevant ones are:

  • NGINX web server: /opt/bitnami/nginx/conf/nginx.conf.
  • PostgreSQL: /opt/bitnami/postgresql/conf/postgresql.conf and /opt/bitnami/postgresql/conf/pg_hba.conf.
  • Redis: /opt/bitnami/redis/etc/redis.conf.
  • ChartMuseum: /opt/bitnami/chartmuseum/.env.
  • harbor-adapter-trivy: /opt/bitnami/harbor-adapter-trivy/.env.
  • harbor-core: /opt/bitnami/harbor-core/.env and /etc/core/app.conf.
  • harbor-exporter: /opt/bitnami/harbor-exporter/.env.
  • harbor-jobservice: /opt/bitnami/harbor-jobservice/.env and /etc/jobservice/config.yml.
  • harbor-notary-server: /opt/bitnami/harbor-notary-server/.env and /etc/notary/server-config.postgres.json.
  • harbor-notary-signer: /opt/bitnami/harbor-notary-signer/.env and /etc/notary/signer-config.postgres.json.
  • harbor-registry: /opt/bitnami/harbor-registry/.env and /etc/registry/config.yml.
  • harbor-registryctl: /opt/bitnami/harbor-registryctl/.env and /etc/registryctl/config.yml.

Harbor Ports

Each Harbor service listens to a different port. The most relevant ones are:

  • NGINX web server: 80 and 443.
  • PostgreSQL: 5432. This port is closed by default.
  • Redis: 6379. This port is closed by default.

Most of the Harbor services are not meant to be accessed externally, and due to this, their ports are not open by default. Those ports are:

  • ChartMuseum: 9999.
  • harbor-adapter-trivy: 8081.
  • harbor-core: 8080.
  • harbor-exporter: 8001.
  • harbor-jobservice: 8082.
  • harbor-notary-server: 4443.
  • harbor-notary-signer: 7899.
  • harbor-registry: 5000.
  • harbor-registryctl: 8000.

You can find how to check and modify your firewall settings here.

Harbor services endpoints

All public-facing Harbor services can be accessed through the NGINX web server. Those endpoints are:

  • /: harbor-core service.
  • /notary: Notary service. Useful when enabling Content Trust.

Harbor log files

Each Harbor service logs to a different file. The most relevant ones are:

  • NGINX: /opt/bitnami/nginx/logs/access.log and /opt/bitnami/nginx/logs/error.log.
  • PostgreSQL: /opt/bitnami/postgresql/logs/postgresql.log.
  • Redis: /opt/bitnami/redis/logs/redis.log.
  • ChartMuseum: /opt/bitnami/chartmuseum/logs/chartmuseum.log.
  • harbor-adapter-trivy: /opt/bitnami/harbor-adapter-trivy/logs/harbor-adapter-trivy.log.
  • harbor-core: /opt/bitnami/harbor-core/logs/harbor-core.log.
  • harbor-exporter: /opt/bitnami/harbor-exporter/logs/harbor-exporter.log.
  • harbor-jobservice: /opt/bitnami/harbor-jobservice/logs/harbor-jobservice.log.
  • harbor-notary-server: /opt/bitnami/harbor-notary-server/logs/harbor-notary-server.log.
  • harbor-notary-signer: /opt/bitnami/harbor-notary-signer/logs/harbor-notary-signer.log.
  • harbor-registry: /opt/bitnami/harbor-registry/logs/harbor-registry.log.
  • harbor-registryctl: /opt/bitnami/harbor-registryctl/logs/harbor-registryctl.log.
Last modification December 7, 2022