(registry_auth) {
    basicauth {
        {env.REGISTRY_USERNAME} {env.REGISTRY_PASSWORD_HASH}
    }
}

https://registry.example.com {
    import registry_auth
    reverse_proxy registry:5000
    header {
        X-Content-Type-Options nosniff
    }

    @push method POST PUT PATCH DELETE
    handle @push {
        import registry_auth
        reverse_proxy registry:5000
    }

    @pull method GET HEAD OPTIONS
    handle @pull {
        reverse_proxy registry:5000
    }
}