diff --git a/deploy/registry/Dockerfile b/deploy/registry/Dockerfile
index dedd7d6..8caf00d 100644
--- a/deploy/registry/Dockerfile
+++ b/deploy/registry/Dockerfile
@@ -4,4 +4,5 @@ ARG REGISTRY_USERNAME
 ARG REGISTRY_PASSWORD
 RUN mkdir -p /certs /auth
 RUN htpasswd -Bbn ${REGISTRY_USERNAME} ${REGISTRY_PASSWORD} > /auth/htpasswd
+ADD config.yml /etc/docker/registry/config.yml
 EXPOSE 443
diff --git a/deploy/registry/config.yml b/deploy/registry/config.yml
new file mode 100644
index 0000000..f63dd21
--- /dev/null
+++ b/deploy/registry/config.yml
@@ -0,0 +1,22 @@
+version: 0.1
+proxy:
+  remoteurl: https://quay.io/tinkerbell-actions
+log:
+  accesslog:
+    disabled: true
+  fields:
+    service: registry
+storage:
+  cache:
+    blobdescriptor: inmemory
+  filesystem:
+    rootdirectory: /var/lib/registry
+http:
+  addr: :5000
+  headers:
+    X-Content-Type-Options: [nosniff]
+health:
+  storagedriver:
+    enabled: true
+    interval: 10s
+    threshold: 3