This commit is contained in:
nora 2022-09-01 21:15:39 +02:00
parent 5ec5a3e64e
commit c3ba3c7d74
5 changed files with 27 additions and 11 deletions

View file

@ -23,8 +23,7 @@ http {
server_name "private-docker-registry.nilstrieb.dev"; server_name "private-docker-registry.nilstrieb.dev";
location / { location / {
return 404 'No registry here...'; proxy_pass https://registry:5000/;
#proxy_pass http://registry:5000/;
} }
} }

View file

@ -2,7 +2,7 @@
SCRIPT_DIR=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd ) SCRIPT_DIR=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )
if [ $STAGE = "localhost" ] ; if [ "$STAGE" = "localhost" ] ;
then then
echo "INFO Running on localhost" echo "INFO Running on localhost"
NGINX_CONF="nginx.local.conf" NGINX_CONF="nginx.local.conf"

View file

@ -1,2 +1,6 @@
- https://docs.docker.com/registry/deploying/ - https://docs.docker.com/registry/deploying/
- https://docs.docker.com/registry/configuration/ - https://docs.docker.com/registry/configuration/
```sh
sudo htpasswd -cB /etc/.htpasswd username
```

View file

@ -12,12 +12,6 @@ storage:
maxthreads: 100 maxthreads: 100
delete: delete:
enabled: true enabled: true
#token:
# autoredirect: true
# realm: token-realm
# service: token-service
# issuer: registry-token-issuer
# rootcertbundle: /root/certs/bundle
http: http:
addr: 0.0.0.0:5000 addr: 0.0.0.0:5000
draintimeout: 60s draintimeout: 60s

View file

@ -2,12 +2,31 @@
SCRIPT_DIR=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd ) SCRIPT_DIR=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )
if [ "$STAGE" = "localhost" ] ;
then
echo "INFO Running on localhost"
CERT_VOLUME=""
else
echo "INFO Running on prod"
CERT_VOLUME="\
-v=/etc/letsencrypt:/etc/letsencrypt \
-v=/etc/htpasswd:/htpasswd \
-e=REGISTRY_HTTP_TLS_CERTIFICATE=/etc/letsencrypt/live/nilstrieb.dev/fullchain.pem \
-e=REGISTRY_HTTP_TLS_KEY=/etc/letsencrypt/live/nilstrieb.dev/privkey.pem \
-e=REGISTRY_AUTH=htpasswd \
-e=REGISTRY_AUTH_HTPASSWD_REALM=Realm \
-e=REGISTRY_AUTH_HTPASSWD_PATH=/htpasswd \
"
fi
if docker container inspect registry > /dev/null 2>&1 ; if docker container inspect registry > /dev/null 2>&1 ;
then then
echo "Registry container exists already..." echo "INFO Registry container exists already..."
else else
docker run -d -p 5000:5000 --restart=always --name registry \ docker run -d -p 5000:5000 --restart=always --name registry \
-v "$SCRIPT_DIR/config.yml:/etc/docker/registry/config.yml" \ -v "$SCRIPT_DIR/config.yml:/etc/docker/registry/config.yml" \
-v "/var/lib/docker/registry:/var/lib/registry" \
$CERT_VOLUME \
--net internal \ --net internal \
registry:2 registry:2
fi fi