docker registry example

docker run -d \
  --name "nginx-proxy" \
  --restart "always" \
  -p 80:80 \
  -p 443:443 \
  -v /var/docker/nginx-proxy/certs:/etc/nginx/certs:ro \
  -v /var/docker/nginx-proxy/htpasswd:/etc/nginx/htpasswd:ro \
  -v /var/run/docker.sock:/tmp/docker.sock \
  jwilder/nginx-proxy

htpasswd is a directory with your file named after yoru domain: htpasswd/myregistry.example.com
certs is a dir with your certs and keys named after your domain:
  certs/myregistry.example.com.crt
  certs/myregistry.example.com.key
==

docker run -d \
  --name="myregistry" \
  --restart="always" \
  -v "/var/docker/mmregistry/config/config.yml:/etc/docker/registry/config.yml" \
  -e "VIRTUAL_HOST=myregistry.example.com" \
  registry:2.2.1 (or whatever)

config.yml needs to tell your registry to listen on 443:
version: 0.1
log:
    level: info
    formatter: json
    fields:
        service: registry
        environment: staging
        source: registry
http:
    addr: :443
    host: myregistry.example.com
    secret: biglongsecretwhatever

== (or if you want to enable redis memory cache and AWS S3 backed storage):

version: 0.1
log:
    level: info
    formatter: json
    fields:
        service: registry
        environment: staging
        source: company
http:
    addr: :443
    host: registry.example.com
    secret: foo
redis:
    addr: localhost:6379
    db: 0
    dialtimeout: 10ms
    readtimeout: 10ms
    writetimeout: 10ms
    pool:
        maxidle: 16
        maxactive: 64
        idletimeout: 300s
storage:
    cache:
        layerinfo: redis
    s3:
        accesskey: AK..AA
        secretkey: tS..lv
        region: us-east-1
        bucket: private-docker-registry
        encrypt: false
        secure: true
        v4auth: true
        chunksize: 5242880
        rootdirectory: /registry