# Configuring Harbor with a Public SSL Certificate
## 1. Register the Harbor Public SSL Certificate
### 1. Change the hosts file.
```sh
vi /etc/hosts
[IP] Certificate domain
[IP] Certificate domain
```
### 2. Locate the harbor docker-compose.yml file.
```bash
$ sudo find / -name 'docker-compose.yml'
cocktail@priv-registry:~$ sudo find / -name 'docker-compose.yml'/var/lib/cubectl/harbor/docker-compose.yml
cocktail@priv-registry:~$
```
### 3. Modify the domain of the Harbor certificate.
```bash
$ cd /var/lib/cubectl/harbor/common/config/core
$ vi env
# AS-IS
EXT_ENDPOINT=https://10.1.1.50
# TO-BE (Connection address, example:)
EXT_ENDPOINT=https://harbor.cocktailcloud.io
```
### 4. Verify the location of the Harbor certificate.
```bash
# Search in the directory where the previously checked docker-compose.yml is located.
grep -A 20 'nginx-photon' docker-compose.yml
# Check the cert directory in the volumes below.
volumes:
- ./common/config/nginx:/etc/nginx:z
- /data/harbor/secret/cert:/etc/cert:z
- type: bind
source: ./common/config/shared/trust-certificates
target: /harbor_cust_cert
```
### 5. Replace the certificate with the public SSL certificate.
```bash
$ cd /app/data/harbor/secret/cert
$ ls -lrt
-rw------- 1 10000 10000 5055 Apr 11 11:10 server.crt
-rw------- 1 10000 10000 1679 Apr 11 11:11 server.key
# Backup the respective certificates.
$ sudo cp server.crt old_server.crt
$ sudo cp server.key old_server.key
# Replace the file with the assigned certificate.
#(The permissions of the actual certificate should be set to 10000:10000.)
#(PEM format file for Nginx) -ex) Wildcard.k-paas.io_pem.pem
$ sudo tee /app/data/harbor/secret/cert/server.crt <
```bash
$ docker exec -it nginx nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
$ sudo docker exec -it redis redis-cli FLUSHALL
OK
```
### 7. Restart Harbor.
```bash
# The docker-compose.yml file is written in the path confirmed above.
# Stop Harbor
sudo docker compose -f /var/lib/cubectl/harbor/docker-compose.yml down -v
# Start Harbor
sudo docker compose -f /var/lib/cubectl/harbor/docker-compose.yml up -d
또는 (cube 5.2.5)
sudo systemctl restart cube-harbor
```
### 8. Verify the connection.
### 9. Create a directory with the domain name in the /etc/containerd/certs.d directory on all nodes.
```bash
$ cd /etc/containerd/certs.d
$ cp -r 172.25.1.172 pass-regi.cocktailcloud.io
```
### 10. In the hosts.toml file of all directories in /etc/containerd/certs.d, change the part with an IP to the domain.
```bash
$ cd /etc/containerd/certs.d/docker.io
$ vi hosts.toml
## Before the changes
server = "https://docker.io"
[host."https://172.25.1.172/v2/docker.io/"]
capabilities = ["pull", "resolve"]
ca = "/etc/docker/certs.d/172.25.1.172/ca.crt"
override_path = true
----------------------------------------------------------
## After the changes
server = "https://docker.io"
[host."https://paas-regi.cocktailcloud.io/v2/docker.io/"]
capabilities = ["pull", "resolve"]
ca = "/etc/docker/certs.d/paas-regi.cocktailcloud.io/ca.crt"
override_path = true
```
### 11. Copy the directory with the IP in /etc/docker/certs.d to the domain.
```
$ cd /etc/docker/certs.d
$ cp -r 172.25.1.172 pass-regi.cocktailcloud.io
```
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://cocktailcloud.gitbook.io/cocktail-cloud-online-en/advanced-course/harbor.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.