Files
homelabstack/plans/homelab-improvements/tasks/TB-014-registry-auth.md
T
ginnoir 7c7f6dfebc Add Kopia backup stack with Backblaze B2 offsite target.
Protects /config, selective labdata, and nightly DB dumps; documents homelab improvement plan briefs.
2026-06-10 21:21:34 -05:00

1.2 KiB

TB-014 — Registry authentication

Status: not started
Your call: (unset — talk first)


Talk first

Stop. Don't read Reference until we've talked. In chat, say "let's do TB-014" or "registry authentication".

In one sentence: Put a password on your private Docker registry.

Why it came up: registry.ginnoir.com is LAN-only but anyone on LAN/tailnet can push/pull.

Questions

  1. Do you push images to it regularly, or is it barely used?
  2. Will famapp CI or github-runner need login updated?

Your options

Option Meaning
Do it We're doing this — I'll implement or walk you through it
Later Keep on the list, not now
Drop Remove from plan — totally fine
Tweak Change scope; tell me how

What we decided

Decision
Notes
Date

Reference (only open if we're doing it)

Stack / files

stacks/dev/

If we do it — rough steps

  1. htpasswd + registry auth env
  2. Test docker login/pull/push

Done when

  • Unauthenticated pull fails
  • You can pull with creds