docker-registry: Limit access to registry base directory

roles/docker-distribution/tasks/main.yml

@@ -46,6 +46,14 @@
     group: "{{ ansible_wheel }}"
   notify: restart docker-distribution
 
+- name: create docker image directory
+  file:
+    path: /srv/registry/docker
+    state: directory
+    mode: 0770
+    owner: root
+    group: docker
+
 - name: start service
   service:
     name: docker-distribution