Sign inSign up

11notes/registry-proxy

By 11notes

Updated almost 2 years ago

Run your own Docker registry proxy

Image
Developer tools
2

1.5K

11notes/registry-proxy repository overview

Banner

registry-proxy

size version pulls

Run your own Docker registry proxy

SYNOPSIS

What can I do with this? With this image all your offline docker nodes can still request and pull all images available at hub.docker.com. Simply put this image behind your favourite reverse HTTPS proxy and point all nodes via /etc/docker/daemon.json >> "registry-mirrors": ["https://docker.domain.com"] to this proxy. Your offline docker nodes can now successfully pull all public images available. Registry mirrors can be daisy chained, so that the first mirror will pull and hold all public images, and the next mirror would be a private one.

COMPOSE

name: "registry-proxy"
services:
  registry-proxy:
    image: "11notes/registry-proxy:2.8.3"
    container_name: "registry-proxy"
    environment:
      TZ: Europe/Zurich
      REGISTRY_PROXY_CONFIG: |-
        version: 0.1
        log:
          accesslog:
            disabled: false
          level: warn
          formatter: json
          fields:
            service: registry
        storage:
          cache:
            blobdescriptor: inmemory
            blobdescriptorsize: 0
          filesystem:
            rootdirectory: /registry-proxy/var
          maintenance:
            uploadpurging:
              enabled: true
              age: 168h
              interval: 24h
              dryrun: false
        http:
          addr: 0.0.0.0:5000
          net: tcp
          tls:
            certificate: /registry-proxy/ssl/default.crt
            key: /registry-proxy/ssl/default.key
          headers:
            X-Content-Type-Options: [nosniff]
        health:
          storagedriver:
            enabled: true
            interval: 10s
            threshold: 3
        proxy:
          remoteurl: https://registry-1.docker.io
          ttl: 168h
    ports:
      - "5000:5000/tcp"
    volumes:
      - "var:/registry-proxy/var"
    restart: always
volumes:
  var:

DEFAULT SETTINGS

ParameterValueDescription
userdockeruser docker
uid1000user id 1000
gid1000group id 1000
home/registry-proxyhome directory of user docker

ENVIRONMENT

ParameterValueDefault
TZTime Zone
DEBUGShow debug information

SOURCE

PARENT IMAGE

BUILT WITH

TIPS

  • Use a reverse proxy like Traefik, Nginx to terminate TLS with a valid certificate
  • Use Let’s Encrypt certificates to protect your SSL endpoints

ElevenNotes™️

This image is provided to you at your own risk. Always make backups before updating an image to a different version. Check the RELEASE.md for breaking changes. You can find all my repositories on github.

Tag summary

Content type

Image

Digest

sha256:67a260c96

Size

14.7 MB

Last updated

almost 2 years ago

docker pull 11notes/registry-proxy:2.8.3