---
title: "registries"
summary: "Named container registries and the local environment variables holding their credentials."
status: shipped
generated: true
read_when:
  - "Pulling from a private registry"
---

This page is generated from the same Go declarations the loader enforces, so it
cannot drift from what `ob validate` accepts.

## Fields on this page

`password_env` · `server` · `username`

## Reference

| Field | Type | Default | What it does |
| --- | --- | --- | --- |
| `<name>.password_env` | string | — | Local environment-variable name containing the registry password or token. Expects a variable name of letters, digits and underscores, not starting with a digit. |
| `<name>.server` | string | — | Registry hostname, optionally with a port. Expects a host with an optional port and path, such as ghcr.io or registry.example.com:5000. |
| `<name>.username` | string | — | Registry login username. Expects a username of letters, digits and . _ @ + -. |