# OCI Registry Notes

## Why Self-Host
- Full sovereignty over artifacts
- Pair with Gitea for source + images

## TLS
Terminate TLS via:
- Reverse proxy (nginx/Traefik)
- Cloudflare Tunnel

## Signing (Next)
Integrate:
- cosign (Sigstore)
- Notation v2

These will be added as future skills or extensions.