Driver FixRecommendedSound, Wi-Fi or graphics acting up? Check drivers firstFind missing or outdated drivers fast.Check DriversHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PC×
VGSOURCES
Get listed

Container deploymentPATCH 2026.10.15

How to Connect Private Docker Registries to Coolify

By VGSources Team 9 min read

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To deploy a private image in Coolify, create a Docker Image application with the complete image reference, then log the deployment server’s Docker user into the registry under Registries. The registry token is separate from Git credentials. If an image is built elsewhere, the build server needs push access and the Coolify deployment server needs pull access; in Swarm, every eligible node needs access and credentials.

What Coolify needs to pull a private image

A private-registry deployment has four independent requirements:

As an Amazon Associate I earn from qualifying purchases.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • A complete image name, including its registry host, repository path and tag or digest.
  • Registry credentials with permission to pull that repository.
  • Credentials saved for the exact server user that Coolify uses to run Docker commands.
  • The image’s listening port and any required domain or runtime settings.

Coolify pulls the image on the deployment server. A Git deploy key does not satisfy that pull: it can grant access to source code, but it cannot authenticate Docker to a private container registry.

Connect a private registry through the Coolify interface

1. Create a Docker Image application

  1. Open the target Project and Environment in Coolify.
  2. Select + New, then choose Docker Image.
  3. Enter the complete image reference. For example: ghcr.io/example/api:1.4.0.
  4. Alternatively, specify a repository with a version tag or a SHA256 digest, such as ghcr.io/example/api@sha256:<digest>.

Do not enter only a short repository name when the image lives on another registry. The hostname determines where Docker looks and which login entry it uses.

#1 Best Overall
Sale
Gaoye Blue Light Blocking Glasses | Anti UV Ray, For Computers & Gaming, Square Frame, Eyewear for Men and Women
  • BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
  • EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
  • COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
  • LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
  • WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.

2. Save registry credentials for the deployment server

Use either location in the Coolify interface:

  • Registries in the main sidebar.
  • Servers > [server] > Registries for a server-specific setup.
  1. Select Log in.
  2. Choose the registry type: Docker Hub, GHCR, GitLab, Google Artifact Registry, Azure ACR, AWS ECR or Custom.
  3. Enter the registry host, username and password or access token.
  4. Save the login for the server that will run the application.

Coolify performs the equivalent of docker login for the configured server user. Logging in as your personal shell account does not help if Coolify runs Docker as a different account.

3. Configure the container and deploy

  1. Set Ports Exposes to the port on which the process inside the image listens.
  2. Add the application domain and required runtime settings, such as environment variables or persistent storage.
  3. Select Deploy.
  4. Open the deployment logs and verify that the image pull, container start and health checks complete.

The exposed port is the container’s internal listening port, not necessarily the public HTTP or HTTPS port. If the process listens on port 8080 inside the image, expose 8080 even when Coolify terminates TLS at the domain.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Log in with SSH when the UI is unavailable

SSH into the server as the same operating-system user that Coolify uses for Docker operations. Then log in to the registry directly:

docker login <registry-domain>

For a token, avoid putting the secret in shell history by piping it through standard input:

printf '%s' "$REGISTRY_TOKEN" | docker login <registry-domain> --username <username> --password-stdin

After a successful login, Docker writes the credential entry to that user’s ~/.docker/config.json. Return to Coolify and redeploy the Docker Image application so the deployment uses the updated authentication.

Rank #2
Windex Gaming Cleaning Wipes, Pre-Moistened Wipes to Instantly Clean all Gaming Gear and Electronics, Resealable Packaging for a Freshness Lock, 25 count (Pack of 1)
  • WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
  • AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
  • PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
  • ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
  • COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed

Git credentials and registry credentials are different

Coolify can use Git credentials to clone a private repository, but those credentials do not grant access to a private image. A deploy key cannot authenticate Docker to a private container registry.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Credential What it authorizes Where it is used
Git deploy key or repository token Cloning source code and related Git operations Source retrieval during a build
Registry username and password/token Pulling images; pushing as well only when the token has push permission Docker commands on the relevant server

Use a registry token with the smallest scope that matches the job. A deployment-only server generally needs pull permission. A build server that publishes images needs push permission in addition to any pull permission required by its workflow.

Where Coolify stores the login and why the server user matters

Docker stores registry credentials in the server user’s ~/.docker/config.json. Coolify’s documentation describes these credentials as encoded, not encrypted. Protect the operating-system account, restrict access to the file, and treat the token as a secret that can be revoked and rotated.

The login is tied to both a registry hostname and a Unix user. These examples are different authentication contexts:

  • /home/deploy/.docker/config.json used by a Coolify Docker command.
  • /root/.docker/config.json created by an administrator testing a pull as root.

A successful pull in the second context does not prove that Coolify can pull in the first. Always test with the same account and on the same server that performs the deployment.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
LISEN Cell Phone Stand Phone Holder for Desk, Office Decor Gadgets for Men | Office Gifts for Women, iPhone Stand, Gadgets for Men, Office Decor, Gaming Desk Accessories for Samsung Fold 8, Switch, iPad
  • Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
  • Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
  • Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
  • ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
  • Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)

Use tags and digests deliberately

Version tags

A tag such as ghcr.io/example/api:1.4.0 is easy to read and works well when your release process treats version tags as immutable. It makes deployment logs and rollback decisions understandable.

SHA256 digests

A reference such as ghcr.io/example/api@sha256:<digest> identifies fixed image content. It is the strongest choice when you need a deployment to run exactly the bytes that were verified or promoted.

The risk of latest

A mutable tag such as latest can point to different content on a later deployment or restart. That can make an apparently identical Coolify configuration run a different image. When investigating a changed deployment, replace a mutable tag with a version tag or digest so the image content is no longer moving.

Reference style Readability Content stability Best use
Mutable tag, such as latest High Can change between pulls Only when moving content is intentional
Version tag, such as 1.4.0 High Stable if your release policy keeps it immutable Routine releases and human-readable rollbacks
SHA256 digest Lower Fixed to one image content address Audited, reproducible and forensic deployments

Authenticate every machine in the delivery path

One deployment server

For a prebuilt image pulled directly by one Coolify server, log in on that deployment server. The token must have pull permission for the exact repository path. No separate build-server login is needed unless that server also publishes or otherwise pulls the image.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Separate build and deployment servers

When an image is built on one machine and deployed from another, each role has its own registry operation:

Rank #4
Ledagic IC+RGBW USB Powered Led Light Bar with App & Remote Control, 2 Pack
  • Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
  • Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
  • 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
  • Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
  • USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
Machine Operation Minimum registry permission
Build server Pushes the completed image and may pull base images Push permission for the target repository; pull permission for any private bases
Coolify deployment server Pulls the completed image to start the application Pull permission for the target repository

Logging in on the build server does not transfer authentication to the deployment server. Configure and test both logins, preferably with separate tokens so that either role can be revoked without interrupting the other.

Docker Swarm

In a Swarm deployment, any manager or worker that may run the service must be able to resolve the registry hostname, reach it over the network and authenticate. A pull that succeeds on the manager is not enough if a worker later receives the task.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Identify every eligible node for the application.
  2. Confirm DNS resolution and network connectivity to the registry from each node.
  3. Log in to the registry on each node using the Docker user that will run the service.
  4. Run a test pull of the exact image reference on each node.
  5. Deploy or update the service, then inspect task placement and logs.

If a task repeatedly fails after being scheduled on a particular worker, compare that node’s registry login, hostname resolution and network path with a node where the pull succeeds.

Comparison: choose the registry arrangement that fits the deployment

Arrangement Authentication pattern Operational considerations
External registry, pull-only deployment Deployment server logs in with a pull-scoped token Smallest permission set and simplest runtime path
External registry, build plus deployment Build server authenticates to push; deployment server authenticates to pull Two machines, two tests and preferably separate tokens
Single-host deployment One server user needs the registry login Verify the exact Coolify Docker user rather than an administrator account
Swarm deployment Every eligible manager and worker needs reachability and credentials Node-by-node testing is required before relying on scheduling
Coolify-hosted registry Every pushing or pulling server logs in to the registry domain You own storage, backups, retention and registry availability
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Host a private registry as a Coolify service

Coolify provides a one-click Docker Registry service for teams that want to run the registry alongside their other services. The current template runs registry:3.

How the service is initialized

  • Service variables provide the registry credentials.
  • The startup process generates an htpasswd file from those variables.
  • Images are stored in a persistent volume named registry-data.
  • A public domain is configured for the registry endpoint.

After the service is available, use the generated username and password with:

Best Value
Sale
HUANUO FlowLift™ Dual Monitor Stand, Fully Adjustable Gaming Monitor Desk Mount for 13–32″ Computer Screens, Full Motion VESA 75x75/100x100 with C-Clamp & Grommet Base, Each Arm Holds 4.4 to 19.8 lbs
  • Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
  • Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
  • Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
  • Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
  • Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
docker login <registry-domain>

Run that login on every server that must push or pull. The registry domain, credentials and image path must match the references entered in Coolify.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Storage and recovery responsibilities

Include registry-data in backups. Decide how long old image layers and tags should be retained, monitor disk growth and document how to restore the volume and credentials. A registry service can be running while a full disk prevents new pushes, so storage capacity and retention are part of the deployment design rather than an optional cleanup task.

Troubleshoot “unauthorized” and image-pull failures

Check the image reference first

Compare the hostname, repository path, separator and tag character by character. An authenticated token for ghcr.io/example/api does not help if the application requests another hostname or repository path. For diagnosis, use a known version tag or digest instead of latest.

Check token permissions and scope

Confirm that the token is allowed to pull the repository. If the same machine builds and publishes the image, confirm push permission as well. A token that can read source code or packages in one location may still lack permission for the specific container repository.

Check the Coolify server and user

Verify that the login was saved under the server selected by the application and for the user Coolify uses to execute Docker. Test the exact image with that account. Do not rely on a pull performed as root or by a different deployment account.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Check build-server deployments

If the workflow uses a separate build server, confirm both roles independently: the builder must authenticate before pushing, and the deployment server must authenticate before pulling. A successful push proves only that the builder can publish; it says nothing about the deployment server’s pull credentials.

Check Swarm nodes

For Swarm, test DNS, network reachability and docker pull on every manager and worker that can receive the application. Remove a node from eligibility, fix its credentials or network path, and retest before allowing it to run the service.

Check the container port after authentication succeeds

An image can pull successfully and still appear unavailable when Ports Exposes does not match the process’s internal listening port. Inspect the container logs to identify the listening address and port, then update the Coolify setting and redeploy.

A repeatable verification checklist

  • Image reference includes the correct registry hostname, repository path and immutable tag or digest where appropriate.
  • Registry token has pull permission; build tokens also have the required push permission.
  • Login was performed for the server and operating-system user used by Coolify.
  • Separate build and deployment servers have separate, tested authentication when both roles exist.
  • Every eligible Swarm node can resolve and reach the registry and pull the exact image.
  • Ports Exposes matches the process’s internal listening port.
  • Deployment logs show a successful pull and container start.
  • For a Coolify-hosted registry, the public domain works, registry-data is persistent, backups include that volume and retention is documented.

Security and maintenance practices

  • Prefer pull-only tokens on deployment servers and reserve push permission for build systems that need it.
  • Rotate registry tokens on a schedule and after suspected exposure; update every machine that uses the old credential.
  • Limit access to the server user’s Docker configuration because its contents are encoded rather than encrypted.
  • Use version tags or digests to make rollbacks and incident analysis deterministic.
  • Keep registry storage backed up and monitor retention so old layers do not consume the service volume unexpectedly.
  • When changing registry hosts, update the image reference and the corresponding login entry together; authenticating to the old host does not authorize the new one.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Container deploymentCoolifyDockerDocker SwarmGHCRprivate registry

Leave a reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.