Update nginx.md

Fixed security warning, changed to "anyone who can log on to the server where your Docker Registry is running"
This commit is contained in:
Anne Henmi 2019-01-22 16:16:38 -07:00 committed by GitHub
parent e88b98fcc4
commit 64261850fa
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions

View File

@ -40,8 +40,8 @@ proxy itself.
> ***NOTE:*** Docker does not recommend binding your registry to `localhost:5000` without
> authentication. This creates a potential loophole in your Docker Registry security.
> As a result, anyone with access to your Docker Registry can push images without
> authentication.
> As a result, anyone who can log on to the server where your Docker Registry is running
> can push images without authentication.
Furthermore, introducing an extra http layer in your communication pipeline
makes it more complex to deploy, maintain, and debug. Make sure the extra