This was surprisingly time consuming to have all those function properly behind the proxy. Two important tricks that makes things works were: Drop SSL/TLS from registries endpoints (I assume you're aware of consequences when doing such thing) Do not pass domain name to