Commit 183b36a2 authored by nimrod's avatar nimrod
Browse files

A more concrete Docker registry config. 

2 services, the registry under /v2/ and a browsable frontend under /.
Allow uploading only from a local IP address (from the host itself).
I think that this way I can avoid having authentication and instead just
build and upload on the host.
parent 22fd55f8

conf.d/registry.shore.co.il.conf

+17 −3
Original line number Diff line number Diff line 
map $host $registry { default registy; }

map $host $registry { default registry; }

map $host $registry_fe { default reg; }



server {

    listen      80;
@@ -14,10 +15,23 @@ server { 
    server_name registry.shore.co.il;

    include     snippets/ssl.conf;



    location / {

        proxy_pass          http://$registry$request_uri;

    location /v2/ {

        proxy_pass                  http://$registry:5000$request_uri;

        proxy_http_version          1.1;

        include                     snippets/proxy-headers.conf;

        # disable any limits to avoid HTTP 413 for large image uploads

        client_max_body_size        0;

        # required to avoid HTTP 411: see Issue #1486 (https://github.com/moby/moby/issues/1486)

        chunked_transfer_encoding   on;

        limit_except GET HEAD OPTIONS {

            allow   163.172.74.36;  # ns4.shore.co.il

            include snippets/allow-private-ips.conf;

        }

    }



    location / {

        proxy_pass          http://$registry_fe:8080$request_uri;

        proxy_http_version  1.1;

        include             snippets/proxy-headers.conf;

    }

}