nginx basic auth with different users for read/write

README.md

This nginx configuration allows to restrict access via different methods to separate users.

This is very useful for private docker registries, where you want every member of your team to be able to fetch Docker images, but only some users (admins and CI users) to push new images to the registry.

Example:

• User write can use GET, POST, PUT, DELETE and everything else.
• User read can only use GET and HEAD.
• Anonymous users are denied access entirely.

htpasswd_read

read:$apr1$p3D7wa0B$BQBRV4BU59LZ.hRT20UQz/
write:$apr1$p3D7wa0B$BQBRV4BU59LZ.hRT20UQz/

htpasswd_write

write:$apr1$p3D7wa0B$BQBRV4BU59LZ.hRT20UQz/

nginx.conf

location / {
  auth_basic           "read";
  auth_basic_user_file /etc/nginx/htpasswd_read;
  limit_except GET {
    auth_basic           "write";
    auth_basic_user_file /etc/nginx/htpasswd_write;
  }
  proxy_pass http://httpbin.org;
}