将Docker存储库配置为工件中的子域

Question

We are trying to set up a docker repository within artifactory version 4.11.1, following is the set up

-- Created a local docker repo - docker-local
-- Created a virtual dokcer repo - docker-virtual
-- Created a remote docker repo - docker-hub
-- Configured docker-local to be the default deployment repo

We are using a multidomain certificate that supports reverse-proxy.company.com and docker-virtual.reverse-proxy.company.com

The question is Should the nginx configuration be set to the following

server {
listen 80;
listen 443;
server_name docker-virtual.reverse-proxy.company.com reverse-proxy.company.com;
 ..... other confug

}

With this set up I expect the lients to connect to the virtual repo

docker push docker-virtual.reverse-proxy.company.com/<my-image>

Is this a valid set up? Note that we dont have a wildcard certificate and its not an option. Does the multidomain certificate need to support the default deployment directory as well?

Answer 1

So you can do it that way by having multiple servername statements instead of the wildcard, and then using our wild-card rewrite rule as-is as you suggested. There is no need to support anything other than the docker-virtual.reverse-proxy.company.com and the reverse-proxy.company.com as the forward from docker-virtual to the local is internal to artifactory.

You could also have separate server statements, which would make it easier to have single domain certs separately. The docker one would then be:

server {
listen 443;  //docker is ssl only
server_name docker-virtual.reverse-proxy.company.com;
 ..... other confug

}