fcrozat/distribution
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update nginx.md

Browse Source 
wording
This commit is contained in:
Anne Henmi 2019-01-02 08:51:16 -07:00 committed by GitHub
parent 8112d01b9b
commit f89f0867e2
1 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
docs/recipes/nginx.md
View File

@ -38,11 +38,10 @@ you want through the secondary authentication mechanism implemented inside your
proxy, it also requires that you move TLS termination from the Registry to the proxy, it also requires that you move TLS termination from the Registry to the
proxy itself. proxy itself.
> Another important thing to note is that by binding your registry to > ***NOTE:*** Docker does not recommend binding your registry to `localhost:5000` without
> `localhost:5000` without authentication, you open up a potential loophole in > authentication. This creates a potential loophole in your Docker Registry security.
> your Docker Registry security - anyone who can log on to the server where your > As a result, anyone with access to your Docker Registry can push images without
> Docker Registry is running can push images to your registry, without > authentication.
> authentication. This could have potentially devastating effects.
Furthermore, introducing an extra http layer in your communication pipeline Furthermore, introducing an extra http layer in your communication pipeline
makes it more complex to deploy, maintain, and debug. Make sure the extra makes it more complex to deploy, maintain, and debug. Make sure the extra