Docker connect to local secure registry

Question

I have set up a private registry and secured it according to the recipe with an nginx reverse proxy. nginx listens on port 5000 using SSL.

docker pull myregistry:5000/foo:latest from a remote machine to that registry works fine.

However, that same command on myregistry itself results in docker trying to access the registry (through nginx) via HTTP, not HTTPS. Since nginx listens using SSL, it returns an error ("The plain HTTP request was sent to HTTPS port").

According to the Docker documentation, local registries are automatically considered as insecure.

In my case, I want the local registry also to be considered as secure, so that docker pull myregistry:5000/foo:latest works on the same machine. How to achieve that?

There is only an option to mark remote registries as insecure, but not to mark a specific registry as secure.

Obviously, I cannot use a different port to listen for plain HTTP, since that would change the image name. I also did not find a way to make nginx accept HTTP traffic on the same port based on IP address.