Verdaccio

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

Overview

Verdaccio is a lightweight, zero-config private npm proxy registry built on Node.js. It lets you host your organisation's private packages, cache packages from the public npm registry so installs keep working when npmjs.org is slow or unreachable, and gives you full control over who can publish and install. This image delivers Verdaccio fully installed and configured as a system service, so a private package registry is running within minutes of launch.

Application Stack

The Verdaccio registry installed globally from npm and run by a dedicated unprivileged service account. The storage tree of published and cached package tarballs stored on a dedicated data disk so the registry data is independently resizable. A systemd service that starts the registry on boot and restarts it on failure. An nginx reverse proxy that publishes the web interface and the registry API on port 80 behind HTTP Basic authentication.

Private npm Registry

Publish your own scoped and unscoped packages with npm publish, install them with npm install from any machine pointed at the registry, and let Verdaccio transparently proxy and cache anything from the public npm registry that you have not published yourself. Browse, search and inspect packages and their versions in the built in web interface.

Secure First Boot

On the first boot of your instance a one shot service generates a fresh admin password, unique to that instance, writes it into both the registry htpasswd file and the nginx credentials file, and writes the password to a root only file. Self service signup is disabled, so only the admin and the users you add can authenticate. No shared or default credentials ship in the image.

Ready To Use

The Verdaccio web interface is served on port 80 through nginx. Sign in with the generated administrator credentials to browse packages and copy the npm commands. Point npm at the instance on port 80, run npm login as admin, then publish and install private packages.

cloudimg Support

24/7 technical support by email and chat. Help with deployment, npm client configuration, user and access management, uplink and caching policy, scoped package layout, TLS and storage tuning.

Use Cases

A private package registry for an engineering team or organisation. A caching proxy in front of the public npm registry for reliable, faster installs. Internal distribution of proprietary modules. An air gap friendly registry for restricted networks.

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.