auth_config.yaml

# A simple example. See reference.yml for explanation for explanation of all options.
#
#  auth:
#    token:
#      realm: "https://127.0.0.1:5001/auth"
#      service: "Docker registry"
#      issuer: "Acme auth server"
#      rootcertbundle: "/path/to/server.pem"

server:
  addr: ":5001"
  certificate: "/ssl/domain.crt"
  key: "/ssl/domain.key"

token:
  issuer: "Auth Service" # Must match issuer in the Registry config.
  expiration: 900

acl:
  # This will allow authenticated users to pull/push
  - match:
      account: "admin"
    actions: ["push"]
ext_auth:
  command: "/extensions/authentication" # Can be a relative path too; $PATH works.
  args: [""]
# ext_authz:
#   command: "/extensions/authorization"
#   args: [""]