Configuring Harbor with HTTPS Access via letsencrypt(certbot with --standalone flag)

create-cert-and-key-with-certbot.sh

sudo certbot -d reg.example.com --manual --preferred-challenges dns certonly

harbor.cfg

#The IP address or hostname to access admin UI and registry service.
#DO NOT use localhost or 127.0.0.1, because Harbor needs to be accessed by external clients.
hostname = registry.example.com

#The protocol for accessing the UI and token/notification service, by default it is http.
#It can be set to https if ssl is enabled on nginx.
ui_url_protocol = https

#The path of cert and key files for nginx, they are applied only the protocol is set to https
ssl_cert = /etc/letsencrypt/live/registry.example.com/fullchain.pem
ssl_cert_key = /etc/letsencrypt/live/registry.example.com/privkey.pem