3 ms·
https://docs.docker.com/registry/ https://docs.docker.com/registry/ you can set it up in less 10 min and the only thing required is to add '--insecure-registry
by swuecho 6y ago
https://docs.docker.com/registry/ https://docs.docker.com/registry/
you can set it up in less 10 min and the only thing required is to add '--insecure-registry' in your client. It is not a issue if all your machine are in private network.
- johnmaguire2013 6y agoIsn't there no authentication on that registry? I guess that's fine if you don't believe in zero-trust architecture.
- swuecho 6y agoyou are right. That is what you can get in minutes.
- majewsky 6y agoIf you cannot get a TLS cert for internal infrastructure in a few minutes, I'd recommend you start looking into why.
- swuecho 6y agono good document on it and it is not very important for me ( I run it on homelab). still wonder how to do it in minutes.
- Aeolos 6y agoI use this (in a docker image) to generate certificates automatically: https://github.com/adferrand/dnsrobocert https://github.com/adferrand/dnsrobocert Expect to spend 1-2 hours first time you try it until you can setup the correct DNS records, API keys and configuration. Afterwards it's pretty hands off, every three months you'll receive an email from letsencrypt and you'll have to rerun this script to regenerate your certificates. Takes 2-3 minutes max (but of course you still need to distribute your certificates to all relevant services...)
- roleone 6y agoIf you run traefik it's even easier: https://docs.traefik.io/https/acme/ https://docs.traefik.io/https/acme/