infra: Private Image Registry

[KiaArmani]

Goal: Figure out how to deploy a private docker image registry in a secure manner that is accessible to both in-network machines (GameServers, possibly CI/CD) and remote machines (i.e. An engineer wanting to locally build and deploy an image to a specific tag)

• Review Secret Management in CI / CD. Humans should not be able to access auth. tokens to registry with full access.
• Look into user management and how one could grant users access to specific tags. (push / pull respectively)

[KiaArmani]

Deployed the registry on a new VM running within the Tailscale network, I will leave out additional auth for now as it is only accessible from within that secure network anyway.

Setup using: https://docs.docker.com/registry/deploying/

Next:

• Added certificate to avoid the need to add registry as insecure registry in Docker Desktop.

[KiaArmani]

Done. Pretty nice guide for a quick setup here, though it does not work for Tailscale and IP restricting. Need to force Docker to use the Tailscale Network adapter to push these commands somehow.