Reverse proxy with nginx to have a read-only Docker registry