{
    "default": [
        {
            "type": "{{ podman_policy_default_type }}"
        }
    ],
    "transports": {
        "docker-daemon": {
            "": [
                {
                    "type": "insecureAcceptAnything"
                }
            ]
        },
        "docker": {
{% for registry in podman_policy_trusted_registries %}
            "{{ registry.registry }}": [
                {
                    "type": "{{ registry.type }}"{% if registry.keyPath is defined %},
                    "keyType": "{{ registry.keyType | default('GPGKeys') }}",
                    "keyPath": "{{ registry.keyPath }}"{% endif %}{% if registry.keyData is defined %},
                    "keyType": "{{ registry.keyType | default('GPGKeys') }}",
                    "keyData": "{{ registry.keyData }}"{% endif %}{% if registry.signedIdentity is defined %},
                    "signedIdentity": {{ registry.signedIdentity | to_json }}{% endif %}
                }
            ]{% if not loop.last %},{% endif %}
{% endfor %}
{% if podman_policy_reject_unknown_registries %}
            "": [
                {
                    "type": "reject"
                }
            ]
{% endif %}
        }
    }
}