[ci skip] add TLS to private registry, switch to registry.viktorbarzin.me

modules/docker-registry/docker-compose.yml

@@ -114,6 +114,7 @@ services:
       - "5050:5050"
     volumes:
       - /opt/registry/nginx.conf:/etc/nginx/nginx.conf:ro
+      - /opt/registry/tls:/etc/nginx/tls:ro
       - nginx-cache:/var/cache/nginx
     networks:
       - registry

modules/docker-registry/nginx_registry.conf

@@ -223,11 +223,15 @@ http {
         }
     }
 
-    # --- Private R/W Registry (port 5050) ---
+    # --- Private R/W Registry (port 5050, TLS) ---
 
     server {
-        listen 5050;
-        server_name _;
+        listen 5050 ssl;
+        server_name registry.viktorbarzin.me;
+
+        ssl_certificate /etc/nginx/tls/fullchain.pem;
+        ssl_certificate_key /etc/nginx/tls/privkey.pem;
+        ssl_protocols TLSv1.2 TLSv1.3;
 
         client_max_body_size 0;
         proxy_request_buffering off;