Private Registries

Internal npm, PyPI, and Docker registries for mirrors.outoforder.space. Ask an admin for credentials if you don't have an account yet.

npm PyPI Docker Accounts

npm Verdaccio

Proxies and caches the public npm registry, and hosts private/scoped packages. Registry URL: https://npm.mirrors.outoforder.space

Site-wide auth (installs only): reads — npm install, npm pack, browsing — sit behind HTTP basic auth (user admin) — ask an admin for the password. npm login and npm publish below skip this and use your personal Verdaccio account instead.

Set up installs (reads)

npm login won't help here — it only sets Verdaccio's own token, which isn't what the site-wide basic auth checks. Add this to .npmrc instead (project or ~/.npmrc), with the password base64-encoded alongside the username:

//npm.mirrors.outoforder.space/:_auth=<base64 of admin:the-shared-password>
//npm.mirrors.outoforder.space/:always-auth=true

Log in (to publish)

npm adduser --registry=https://npm.mirrors.outoforder.space

Use it for everything (recommended)

Set it as your default registry so installs of public packages are cached too:

npm config set registry https://npm.mirrors.outoforder.space

Use it only for your org's scope

Add to .npmrc (project or ~/.npmrc):

@myorg:registry=https://npm.mirrors.outoforder.space

Publish

npm publish --registry=https://npm.mirrors.outoforder.space

PyPI devpi

Two indexes are available, both replicated from the master devpi-server. Base URL: https://pypi.mirrors.outoforder.space

Index	Purpose
`root/pypi`	Pull-through mirror/cache of public PyPI
`root/prod`	Internal packages

Site-wide auth: browsing and pip install sit behind HTTP basic auth (user admin) — ask an admin for the password. Uploads (below) skip this and use devpi's own per-user permissions instead.

Install from public PyPI (via the mirror)

pip install --index-url https://pypi.mirrors.outoforder.space/root/pypi/+simple/ requests

Install internal packages, falling back to public PyPI

pip install \
  --index-url https://pypi.mirrors.outoforder.space/root/prod/+simple/ \
  --extra-index-url https://pypi.mirrors.outoforder.space/root/pypi/+simple/ \
  some-internal-package

Make it the default (avoid retyping index URLs)

Add to ~/.pip/pip.conf (or %APPDATA%\pip\pip.ini on Windows):

[global]
index-url = https://pypi.mirrors.outoforder.space/root/prod/+simple/
extra-index-url = https://pypi.mirrors.outoforder.space/root/pypi/+simple/

Publish internal packages

Upload straight through this mirror — it relays the request to the master devpi-server and only reports success once synced back. Uploads skip the site-wide basic auth above and use your devpi account's own permissions instead; ask an admin for an account with root/prod upload access:

pip install devpi-client
devpi use https://pypi.mirrors.outoforder.space/root/prod
devpi login <your-username>
devpi upload

Docker Harbor

Registry URL: docker.mirrors.outoforder.space. Browse projects, RBAC, and vulnerability scan results in the web dashboard.

Log in

docker login docker.mirrors.outoforder.space

Push

docker tag myimage:latest docker.mirrors.outoforder.space/myproject/myimage:latest
docker push docker.mirrors.outoforder.space/myproject/myimage:latest

Pull

docker pull docker.mirrors.outoforder.space/myproject/myimage:latest

CI/automation: use a Harbor robot account scoped to your project instead of a personal login — ask an admin to create one, or see scripts/harbor-user.sh.

Getting an account

All three registries require authentication to publish/push; npm and Docker also require it to log in at all. Accounts are created by an admin — reach out with your desired username to get set up on:

npm — Verdaccio account (scripts/verdaccio-user.sh)
PyPI — devpi account on the master server (scripts/devpi-user.sh)
Docker — Harbor account + project role (scripts/harbor-user.sh)