Docker Registry V2(distribution) & Proxy(nginx) 的搭建经历
userwww www;worker_processesauto;
error_log /var/log/nginx/error.log error;
pid logs/nginx.pid;
worker_rlimit_nofile 51200;
events {
use epoll;
worker_connections51200;
multi_accept on;
}
http {
include mime.types;
default_typeapplication/octet-stream;
log_formatmain'$http_host $remote_user [$time_local] $request '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" $remote_addr $request_time $upstream_response_time';
access_log/var/log/nginx/access.logmain;
server_names_hash_bucket_size 128;
client_header_buffer_size 32k;
large_client_header_buffers 4 32k;
sendfile on;
tcp_nopush on;
tcp_nodelay on;
#keepalive_timeout0;
keepalive_timeout65;
#gzipon;
upstream registry {
server 127.0.0.1:5000;
}
server {
listen 443;
server_nameregistry.chanjet.com;
ssl on;
ssl_certificate /etc/nginx/ssl/domain.crt;
ssl_certificate_key /etc/nginx/ssl/domain.key;
client_max_body_size 0;
chunked_transfer_encoding on;
location /v2/ {
auth_basic "Registry realm";
auth_basic_user_file /opt/nginx/conf/.htpasswd;
add_header 'Docker-Distribution-Api-Version' 'registry/2.0' always;
proxy_pass http://registry;
proxy_set_headerHost $http_host; # required for docker client's sake
proxy_set_headerX-Real-IP $remote_addr; # pass on real client's IP
proxy_set_headerX-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_headerX-Forwarded-Proto $scheme;
proxy_read_timeout 900;
}
}
}
页:
[1]