How to Set Up a Self-Hosted Docker Registry Mirror with Automatic HTTPS

Preparation

⚠️ Important: Use a foreign server (e.g., Tencent Cloud special‑offer) that is not blocked, with a cheap domain (e.g., ending with .xyz, first year as low as ¥7). Ensure the domain's A and * records point to the server; the script can automatically obtain HTTPS certificates.

Deploy with Docker Compose (auto HTTPS)

⚠️ Prerequisite: Have a domain with DNS resolved to the server IP.

1. Create docker-compose.yaml

version: '3'
services:
  crproxy:
    image: ghcr.io/daocloud/crproxy/crproxy:v0.9.1
    container_name: crproxy
    restart: unless-stopped
    ports:
    - 80:8080
    - 443:8080
    command: |
      --acme-cache-dir=/tmp/acme
      --acme-hosts=*
      --default-registry=docker.io
    tmpfs:
      - /tmp/acme
    # optional proxy settings if the server cannot reach target registries
    #environment:
    #- https_proxy=http://proxy:8080
    #- http_proxy=http://proxy:8080

2. Start the proxy

docker-compose up -d

3. Pull images through the proxy

docker pull your-domain/hello-world

Image illustrating the service UI:

4. Optionally add to Docker daemon configuration

{
  "registry-mirrors": [
    "https://your-domain"
  ]
}

After editing, reload and restart Docker:

systemctl daemon-reload && systemctl restart docker

Now you can pull images normally:

docker pull hello-world

Original article link: https://www.cnblogs.com/yuwen01/p/18743618 (copyright belongs to the original author).