From 64c55a67106a3b103b2fbe4044ff8689664cdc3c Mon Sep 17 00:00:00 2001
From: Viktor Barzin <viktorbarzin@meta.com>
Date: Sat, 28 Feb 2026 17:57:03 +0000
Subject: [PATCH] [ci skip] add nginx upstream and server block for private
 registry on port 5050

---
 modules/docker-registry/nginx_registry.conf | 34 +++++++++++++++++++++
 1 file changed, 34 insertions(+)

diff --git a/modules/docker-registry/nginx_registry.conf b/modules/docker-registry/nginx_registry.conf
index 15e43994..efa44d79 100644
--- a/modules/docker-registry/nginx_registry.conf
+++ b/modules/docker-registry/nginx_registry.conf
@@ -48,6 +48,11 @@ http {
         keepalive 32;
     }
 
+    upstream private {
+        server registry-private:5000;
+        keepalive 32;
+    }
+
     # --- Docker Hub (port 5000) ---
 
     server {
@@ -217,4 +222,33 @@ http {
             add_header Content-Type text/plain;
         }
     }
+
+    # --- Private R/W Registry (port 5050) ---
+
+    server {
+        listen 5050;
+        server_name _;
+
+        client_max_body_size 0;
+        proxy_request_buffering off;
+        proxy_buffering off;
+        chunked_transfer_encoding on;
+
+        location /v2/ {
+            proxy_pass http://private;
+            proxy_http_version 1.1;
+            proxy_set_header Host $host;
+            proxy_set_header Connection "";
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+
+            proxy_read_timeout 900;
+            proxy_send_timeout 900;
+        }
+
+        location / {
+            return 200 'ok';
+            add_header Content-Type text/plain;
+        }
+    }
 }