dkirillov/distribution
1
0
Fork 0
forked from TrueCloudLab/distribution
Code Pull requests Activity

Update nginx.md

Browse source 
wording
This commit is contained in:
Anne Henmi 2019-01-02 08:51:16 -07:00 committed by GitHub
parent 8112d01b9b
commit f89f0867e2
1 changed files with 4 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
docs/recipes/nginx.md
View file

@ -38,11 +38,10 @@ you want through the secondary authentication mechanism implemented inside your
proxy, it also requires that you move TLS termination from the Registry to the
proxy itself.
> Another important thing to note is that by binding your registry to
> `localhost:5000` without authentication, you open up a potential loophole in
> your Docker Registry security - anyone who can log on to the server where your
> Docker Registry is running can push images to your registry, without
> authentication. This could have potentially devastating effects.
> ***NOTE:*** Docker does not recommend binding your registry to `localhost:5000` without
> authentication. This creates a potential loophole in your Docker Registry security.
> As a result, anyone with access to your Docker Registry can push images without
> authentication.
Furthermore, introducing an extra http layer in your communication pipeline
makes it more complex to deploy, maintain, and debug. Make sure the extra