Registries and Supported Types
Registries allows users to add private registries to the syetm and use them in Templates and Container deployments.
Supported registry types
- Docker Hub: Username/Password or Personal Access Token.
- GitHub Container Registry (GHCR): ghcr.io with a PAT.
- GitLab Container Registry: registry.gitlab.com with a PAT.
- AWS ECR
- Harbor
- Private/On‑prem Registry: hostname and credentials (Basic or token).
- Anonymous: pull public images without credentials (default no need to setup a registry).
Examples
# Compose example referencing a project registry
services:
api:
image: ghcr.io/your-org/api@sha256:deadbeef...
Add a registry
- Registries > Add Registry.
- Select a type and enter the server URL.
- Provide credentials (store secrets as project variables where possible).
- Save and test. The registry becomes available in Templates and Container deploy dialogs.
Security
- Use least‑privilege tokens (read‑only for pulls).
- Rotate credentials periodically and after staff changes.
- Avoid embedding credentials directly in compose; rely on the configured registry auth or secrets.