Try to use mTLS client certs with docker registry. I deployed standart registry from docker docs with port 5000. And external nginx with mTLS on port 443. Nginx check client cert and proxy traffic to registry container on port 5000. With curl it is works fine.