[{"_1":2,"_248":-5,"_249":-5},"loaderData",{"_3":4,"_18":19,"_25":26,"_246":247},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16,"_17":11},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","dockerRebrandTour","routes/_layout",{"_20":-5,"_21":22,"_23":11,"_24":22},"username","isAskGordonEnabled",true,"showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_27":28,"_29":-5,"_30":11,"_31":11,"_32":33,"_34":35,"_36":-5,"_37":11,"_38":39,"_89":90,"_110":111,"_234":-5,"_235":11,"_236":22,"_237":11,"_238":11,"_239":-5,"_240":11,"_241":-5,"_242":243,"_244":112,"_245":-7},"canonicalUrl","https://hub.docker.com/r/esailors/aws-ecr-http-proxy/builds","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","esailors","reponame","aws-ecr-http-proxy","cloudBuildSource","isAutobuildsAvailable","repo",{"_40":41,"_42":43,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":55,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":69,"_70":71,"_72":11,"_73":33,"_74":75,"_80":22,"_81":82,"_86":33,"_87":88},"categories",[],"content_types",[44],"image","date_registered","2017-12-04T20:51:42.765163Z","description","A nginx based pull/push through proxy for AWS ECR with support of cache and token refresh","is_private","last_updated","2025-01-30T14:03:54.349206Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[56],"application/vnd.docker.container.image.v1+json","name","pull_count",835094,"repository_type","star_count",2,"status",1,"status_description","active","source","collaborator_count",0,"full_description","

\n \n \n \n \n \n \n\n

\n\n# aws-ecr-http-proxy\n\nA very simple nginx push/pull proxy that forwards requests to AWS ECR and caches the responses locally.\n\n### Configuration:\nThe proxy is packaged in a docker container and can be configured with following environment variables:\n\n| Environment Variable | Description | Status | Default |\n| :---------------------------------: | :--------------------------------------------: | :-------------------------------: | :--------: |\n| `AWS_REGION` | AWS Region for AWS ECR | Required | |\n| `AWS_ACCESS_KEY_ID` | AWS Account Access Key ID | Optional | |\n| `AWS_SECRET_ACCESS_KEY` | AWS Account Secret Access Key | Optional | |\n| `AWS_USE_EC2_ROLE_FOR_AUTH` | Set this to true if we do want to use aws roles for authentication instead of providing the secret and access keys explicitly | Optional | |\n| `UPSTREAM` | URL for AWS ECR | Required | |\n| `RESOLVER` | DNS server to be used by proxy | Required | |\n| `PORT` | Port on which proxy listens | Required | |\n| `CACHE_MAX_SIZE` | Maximum size for cache volume | Optional | `75g` |\n| `CACHE_KEY` | Cache key used for the content by nginx | Optional | `$uri` |\n| `ENABLE_SSL` | Used to enable SSL/TLS for proxy | Optional | `false` |\n| `REGISTRY_HTTP_TLS_KEY` | Path to TLS key in the container | Required with TLS | |\n| `REGISTRY_HTTP_TLS_CERTIFICATE` | Path to TLS cert in the container | Required with TLS | |\n\n### Example:\n\n```sh\ndocker run -d --name docker-registry-proxy --net=host \\\n -v /registry/local-storage/cache:/cache \\\n -v /registry/certificate.pem:/opt/ssl/certificate.pem \\\n -v /registry/key.pem:/opt/ssl/key.pem \\\n -e PORT=5000 \\\n -e RESOLVER=8.8.8.8 \\\n -e UPSTREAM=https://XXXXXXXXXX.dkr.ecr.eu-central-1.amazonaws.com \\\n -e AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID} \\\n -e AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY} \\\n -e AWS_REGION=${AWS_DEFAULT_REGION} \\\n -e CACHE_MAX_SIZE=100g \\\n -e ENABLE_SSL=true \\\n -e REGISTRY_HTTP_TLS_KEY=/opt/ssl/key.pem \\\n -e REGISTRY_HTTP_TLS_CERTIFICATE=/opt/ssl/certificate.pem \\\n esailors/aws-ecr-http-proxy:latest\n```\n\nIf you ran this command on \"registry-proxy.example.com\" you can now get your images using `docker pull registry-proxy.example.com:5000/repo/image`.\n\n### Deploying the proxy\nModify the ansible role [variables](https://github.com/eSailors/aws-ecr-http-proxy/tree/master/roles/docker-registry-proxy/defaults) according to your need and run the playbook as follow:\n```sh\nansible-playbook -i hosts playbook-docker-registry-proxy.yaml\n```\nIn case you want to enable SSL/TLS please replace the SSL certificates with the valid ones in [roles/docker-registry-proxy/files/*.pem](https://github.com/eSailors/aws-ecr-http-proxy/tree/master/roles/docker-registry-proxy/files)\n\n### Note on SSL/TLS\nThe proxy is using `HTTP` (plain text) as default protocol for now. So in order to avoid docker client complaining either:\n - (**Recommended**) Enable SSL/TLS using `ENABLE_SSL` configuration. For that you will have to mount your **valid** certificate/key in the container and pass the paths using `REGISTRY_HTTP_TLS_*` variables.\n - Mark the registry host as insecure in your client [deamon config](https://docs.docker.com/registry/insecure/).\n","has_starred","hub_user","immutable_tags_settings",{"_76":11,"_77":78},"enabled","rules",[79],".*","is_automated","permissions",{"_83":22,"_84":11,"_85":11},"read","write","admin","user","storage_size",958019270,"orgData",{"_91":92,"_93":94,"_95":96,"_97":33,"_98":99,"_100":101,"_102":101,"_103":101,"_104":105,"_106":101,"_107":101,"_108":101,"_109":22},"id","de019388e4bf43f0b26459bcc1551378","uuid","de019388-e4bf-43f0-b264-59bcc1551378","type","organization","orgname","full_name","eSailors LTD.","location","","company","profile_url","date_joined","2017-11-30T14:05:47.645525Z","gravatar_url","gravatar_email","badge","is_active","recentTags",[112,150,156,168,174,184,194,204,214,224],{"_113":44,"_114":115,"_116":117,"_118":119,"_91":120,"_121":122,"_50":137,"_138":139,"_140":141,"_142":56,"_57":143,"_144":145,"_146":128,"_147":137,"_148":66,"_149":22},"content_type","creator",2420402,"digest","sha256:ed9edd180ca9d4e47b4eacf6752ddc907f9ddf53d2fb1c0f812320a7c205eefe","full_size",73839061,18913359,"images",[123],{"_124":125,"_116":117,"_126":101,"_127":128,"_129":130,"_131":132,"_133":101,"_134":-5,"_135":119,"_63":66,"_136":-5},"architecture","amd64","features","last_pulled","2026-11-02T05:54:30.078528044Z","last_pushed","2025-01-30T14:03:02.430671976Z","os","linux","os_features","os_version","size","variant","2025-01-30T14:03:53.957395Z","last_updater",13566972,"last_updater_username","lotto24proxy","media_type","latest","repository",2184983,"tag_last_pulled","tag_last_pushed","tag_status","v2",{"_113":44,"_114":139,"_116":117,"_118":119,"_91":151,"_121":152,"_50":154,"_138":139,"_140":141,"_142":56,"_57":155,"_144":145,"_146":128,"_147":154,"_148":66,"_149":22},839141096,[153],{"_124":125,"_116":117,"_126":101,"_127":128,"_129":130,"_131":132,"_133":101,"_134":-5,"_135":119,"_63":66,"_136":-5},"2025-01-30T14:03:02.746556Z","1.6.0",{"_113":44,"_114":157,"_118":158,"_91":159,"_121":160,"_50":165,"_138":157,"_140":166,"_142":56,"_57":167,"_144":145,"_146":163,"_147":165,"_148":66,"_149":22},1523516,73129014,216936602,[161],{"_124":125,"_116":162,"_126":101,"_127":163,"_129":164,"_131":132,"_133":101,"_134":-5,"_135":158,"_63":66,"_136":-5},"sha256:5608ae045fa799437c1d12061047f36b5d9431089d98c98e3a0941a0824d16e6","2026-11-02T05:01:17.580306191Z","2022-05-19T08:00:05Z","2022-05-19T09:06:20.39691Z","smqasims","1.5.1",{"_113":44,"_114":157,"_118":158,"_91":169,"_121":170,"_50":172,"_138":157,"_140":166,"_142":56,"_57":173,"_144":145,"_146":163,"_147":172,"_148":66,"_149":22},216905487,[171],{"_124":125,"_116":162,"_126":101,"_127":163,"_129":164,"_131":132,"_133":101,"_134":-5,"_135":158,"_63":66,"_136":-5},"2022-05-19T08:00:04.661013Z","test",{"_113":44,"_114":157,"_118":175,"_91":176,"_121":177,"_50":182,"_138":157,"_140":166,"_142":56,"_57":183,"_144":145,"_146":180,"_147":182,"_148":66,"_149":22},73128907,216278612,[178],{"_124":125,"_116":179,"_126":101,"_127":180,"_129":181,"_131":132,"_133":101,"_134":-5,"_135":175,"_63":66,"_136":-5},"sha256:59777d7470a742b392e8aefdea871066d19ed8873bc320576bb8cea6bd8645bc","2026-10-31T21:19:22.843562181Z","2022-05-18T10:10:21Z","2022-05-18T10:19:30.135846Z","1.5.0",{"_113":44,"_114":157,"_118":185,"_91":186,"_121":187,"_50":192,"_138":157,"_140":166,"_142":56,"_57":193,"_144":145,"_146":190,"_147":192,"_148":66,"_149":22},86072463,106296761,[188],{"_124":125,"_116":189,"_126":101,"_127":190,"_129":191,"_131":132,"_133":101,"_134":-5,"_135":185,"_63":66,"_136":-5},"sha256:aa4ce51cab85d64692ab3dae56e77b10fa750762365fef586f23448423585a4c","2026-10-31T03:42:04.697378251Z","2020-06-25T12:08:20Z","2020-06-25T12:08:19.302427Z","1.4.0",{"_113":44,"_114":157,"_118":195,"_91":196,"_121":197,"_50":202,"_138":157,"_140":166,"_142":56,"_57":203,"_144":145,"_146":200,"_147":202,"_148":66,"_149":22},53094396,104905618,[198],{"_124":125,"_116":199,"_126":101,"_127":200,"_129":201,"_131":132,"_133":101,"_134":-5,"_135":195,"_63":66,"_136":-5},"sha256:58787b4dcb2f6658b3a72d47f56642a331bd0b5a4d312b4162a784edac0839ee","2026-10-31T22:07:54.379526743Z","2020-06-15T09:31:07Z","2020-06-15T09:31:06.540631Z","1.3.0",{"_113":44,"_114":157,"_118":205,"_91":206,"_121":207,"_50":212,"_138":157,"_140":166,"_142":56,"_57":213,"_144":145,"_146":210,"_147":212,"_148":66,"_149":22},86072330,104905202,[208],{"_124":125,"_116":209,"_126":101,"_127":210,"_129":211,"_131":132,"_133":101,"_134":-5,"_135":205,"_63":66,"_136":-5},"sha256:a0818b7938b16530efd87496468ba5e11eb19f276712dbc57f09f6a0dcae863e","2026-10-29T04:49:58.883473095Z","2020-06-15T09:27:28Z","2020-06-15T09:27:27.367633Z","1.3.1",{"_113":44,"_114":115,"_118":215,"_91":216,"_121":217,"_50":222,"_138":115,"_140":33,"_142":56,"_57":223,"_144":145,"_146":220,"_147":222,"_148":66,"_149":22},52824139,67606218,[218],{"_124":125,"_116":219,"_126":101,"_127":220,"_129":221,"_131":132,"_133":101,"_134":-5,"_135":215,"_63":66,"_136":-5},"sha256:021d515b5f18247ce5ed67c321a2cc9b6c8f8158cc31e4ab06adeeb1adb5a699","2026-11-01T05:40:06.665815134Z","2019-09-03T08:33:34Z","2019-09-03T08:33:33.53141Z","1.2.0",{"_113":44,"_114":115,"_118":225,"_91":226,"_121":227,"_50":232,"_138":115,"_140":33,"_142":56,"_57":233,"_144":145,"_146":230,"_147":232,"_148":66,"_149":22},52822230,67396979,[228],{"_124":125,"_116":229,"_126":101,"_127":230,"_129":231,"_131":132,"_133":101,"_134":-5,"_135":225,"_63":66,"_136":-5},"sha256:2a1fff39cc7f13d3bc90b0aa3a3be8ec88126be6fda9cc57d0b9664696236214","2026-10-30T05:55:55.375504405Z","2019-08-30T14:49:58Z","2019-08-30T14:49:57.960253Z","1.0.1","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxRunInCloud","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.builds",{"_31":11,"_36":-5},"actionData","errors"]