Push large images

Behind Cloudflare (Free and Pro plans), each image layer must be under 100 MB. Pulls have no limit.

Not behind Cloudflare? You have nothing to do.

Add an upload address

The layers can skip Cloudflare through a second address. People still push to the main address, and the server sends the layers to the upload address.

Caution

This makes the IP address of your server public.

1. In Cloudflare, add a second name for your server, such as upload.example.com. Make the record DNS only.

2. Serve that name over HTTPS too, as in Serve over HTTPS. With Caddy, list both names:

   /etc/caddy/Caddyfile

   repo.example.com, upload.example.com {
       reverse_proxy localhost:8080
   }

3. In the firewall of your server, open the HTTPS port for the computers that push.

4. Open Settings › General. Under Docker, set Docker upload address to https://upload.example.com.

5. Turn on Expose the origin IP for Docker uploads, then click Save.

Push with ORAS and Helm 4

ORAS and Helm 4 send layers only to the address in the command. Push to the upload address:

helm push mychart-0.1.0.tgz oci://upload.example.com/docker
oras push upload.example.com/docker/team/art:1.0 file.txt

If something goes wrong

A push stops with 413 behind Cloudflare

The layer is over 100 MB. Add an upload address.

A push of a layer over 2 GiB fails

The server takes files up to its Max upload size, 2 GiB by default. Raise it on Settings › General, then click Save.