distribution · gyulaweber · Jun 19, 2015 · Jun 19, 2015
diff --git a/contrib/registry-with-auth/README.md b/contrib/registry-with-auth/README.md
@@ -0,0 +1,17 @@
+# Docker registry with authentication / tls
+
+1. create htaccess file in nginx/htpassd
+2. update your nginx/nginx.conf
+3. add your certs ( nginx/certs/ssl.key and ssl.crt )
+
+### Build the nginx image
+```
+docker-compose build
+```
+
+### Start nginx and registry
+```
+docker-compose up
+
+```
+
diff --git a/contrib/registry-with-auth/docker-compose.yml b/contrib/registry-with-auth/docker-compose.yml
@@ -0,0 +1,17 @@
+registry:
+  restart: always
+  image: registry:2
+  ports:
+  environment:
+    REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY: /var/lib/registry
+  volumes:
+    - ./registry-data:/var/lib/registry
+
+regfront:
+  restart: always
+  build: ./nginx/
+  ports:
+    - 443:443
+  links:
+    - registry:registry
+
diff --git a/contrib/registry-with-auth/nginx/Dockerfile b/contrib/registry-with-auth/nginx/Dockerfile
@@ -0,0 +1,9 @@
+FROM nginx
+
+COPY certs /etc/ssl/certs
+COPY nginx.conf /etc/nginx/conf.d/default.conf
+COPY docker-registry.conf /etc/nginx/docker-registry.conf
+COPY htpasswd /etc/nginx/htpasswd
+
+EXPOSE 443
+
diff --git a/contrib/registry-with-auth/nginx/docker-registry.conf b/contrib/registry-with-auth/nginx/docker-registry.conf
@@ -0,0 +1,6 @@
+proxy_pass                       http://docker-registry;
+proxy_set_header  Host           $http_host;   # required for docker client's sake
+proxy_set_header  X-Real-IP      $remote_addr; # pass on real client's IP
+proxy_set_header  Authorization  ""; # see https://github.com/dotcloud/docker-registry/issues/170
+proxy_read_timeout               900;
+
diff --git a/contrib/registry-with-auth/nginx/htpasswd b/contrib/registry-with-auth/nginx/htpasswd
diff --git a/contrib/registry-with-auth/nginx/nginx.conf b/contrib/registry-with-auth/nginx/nginx.conf
@@ -0,0 +1,43 @@
+
+upstream docker-registry {
+  server registry:5000;
+}
+
+server {
+  listen 443;
+  server_name example.org;
+
+  ssl on;
+  ssl_certificate /etc/ssl/certs/ssl.crt;
+  ssl_certificate_key /etc/ssl/certs/ssl.key;
+
+  client_max_body_size 0;
+  chunked_transfer_encoding on;
+
+  location / {
+    include               docker-registry.conf;
+  }
+
+  location /_ping {
+    auth_basic off;
+    include               docker-registry.conf;
+  }
+
+  location /v1/_ping {
+    auth_basic off;
+    include               docker-registry.conf;
+  }
+   location /v2/ {
+        if ($http_user_agent ~ "^(docker\/1\.(3|4|5(?!\.[0-9]-dev))|Go ).*$" ) {
+              return 404;
+        }
+
+        proxy_pass http://docker-registry;
+
+        proxy_read_timeout 900;
+
+        add_header 'Docker-Distribution-Api-Version:' 'registry/2.0' always;
+        auth_basic "Restricted";
+        auth_basic_user_file /etc/nginx/htpasswd;
+    }
+}