Protects /config, selective labdata, and nightly DB dumps; documents homelab improvement plan briefs.
1.2 KiB
1.2 KiB
TB-014 — Registry authentication
Status: not started
Your call: (unset — talk first)
Talk first
Stop. Don't read Reference until we've talked. In chat, say "let's do TB-014" or "registry authentication".
In one sentence: Put a password on your private Docker registry.
Why it came up: registry.ginnoir.com is LAN-only but anyone on LAN/tailnet can push/pull.
Questions
- Do you push images to it regularly, or is it barely used?
- Will famapp CI or github-runner need login updated?
Your options
| Option | Meaning |
|---|---|
| Do it | We're doing this — I'll implement or walk you through it |
| Later | Keep on the list, not now |
| Drop | Remove from plan — totally fine |
| Tweak | Change scope; tell me how |
What we decided
| Decision | |
| Notes | |
| Date |
Reference (only open if we're doing it)
Stack / files
stacks/dev/
If we do it — rough steps
- htpasswd + registry auth env
- Test docker login/pull/push
Done when
- Unauthenticated pull fails
- You can pull with creds