add basic auth configuration possibility

Author: Mostowiec Dominik

files/nginx.conf

@@ -23,9 +23,16 @@ http {
   # will run before forking out nginx worker processes
   init_by_lua_block { require "cjson" }
 
+  #https://docs.docker.com/registry/recipes/nginx/#setting-things-up
+  map $upstream_http_docker_distribution_api_version $docker_distribution_api_version {
+  '' 'registry/2.0';
+  }
+
   server {
     listen LISTEN default_server;
 
+    #AUTHCONFIG
+
     # Cache
     add_header X-Cache-Status   $upstream_cache_status;
     proxy_temp_path /cache/temp 1 2;
@@ -52,6 +59,7 @@ http {
                            http_500 http_502 http_503 http_504;
     proxy_cache_lock       on;
 
+    add_header 'Docker-Distribution-Api-Version' $docker_distribution_api_version always;
     add_header "Access-Control-Allow-Origin" "*";
 
     location / {

files/startup.sh

@@ -46,13 +46,19 @@ if [ ! -z "$REGISTRY_HTTP_TLS_CERTIFICATE" ] && [ ! -z "$REGISTRY_HTTP_TLS_KEY"
   SSLINCLUDE="include $SSLCONFIG;"
 fi
 
+AUTHCONFIG=''
+if [ ! -z "$REGISTRY_AUTH_HTPASSWD_PATH" ] && [ ! -z "$REGISTRY_AUTH_HTPASSWD_REALM" ]; then
+  AUTHCONFIG="auth_basic  ${REGISTRY_AUTH_HTPASSWD_REALM};\n    auth_basic_user_file ${REGISTRY_AUTH_HTPASSWD_PATH};"
+fi
+
 # Update nginx config
 sed -i -e s!UPSTREAM!"$UPSTREAM"!g $CONFIG
 sed -i -e s!LISTEN!"$PORT $ENABLESSL"!g $CONFIG
 sed -i -e s!PORT!"$PORT"!g $CONFIG
 sed -i -e s!RESOLVER!"$RESOLVER"!g $CONFIG
 sed -i -e s!CACHE_MAX_SIZE!"$CACHE_MAX_SIZE"!g $CONFIG
 sed -i -e s!#SSLCONFIG!"$SSLINCLUDE"!g $CONFIG
+sed -i -e s!#AUTHCONFIG!"$AUTHCONFIG"!g $CONFIG
 
 # setup ~/.aws directory
 AWS_FOLDER='/root/.aws'