# Docker Proxy for registry.gitlab.com not working

## post by funtimecoding on May 25, 2023

I’m trying to configure Nexus with a Docker Proxy for [registry.gitlab.com](http://registry.gitlab.com/) to proxy the gitlab-runner-helper image ( [registry.gitlab.com/gitlab-org/gitlab-runner/gitlab-runner-helper:x86\_64-dcfb4b66](http://registry.gitlab.com/gitlab-org/gitlab-runner/gitlab-runner-helper:x86_64-dcfb4b66)) - but an error appears in the Nexus log:

```csharp
anonymous org.sonatype.nexus.repository.docker.internal.auth.BearerScheme - Failed to retrieve docker bearer token
2023-05-25 15:25:00,394+0200 WARN  [qtp702342186-465944]  anonymous org.apache.http.impl.auth.HttpAuthenticator - BEARER [complete=true] authentication error: Could not retrieve token from https://gitlab.com/jwt/auth. Status code: 403
```

I do have the Docker Bearer Token realm enabled.

Proxying works for so many other registries, but this one seems to fail. What am I missing?

My cross post from the GitLab forum: [https://forum.gitlab.com/t/registry-gitlab-com-not-working-in-docker-proxy-of-nexus-repository/87118](https://forum.gitlab.com/t/registry-gitlab-com-not-working-in-docker-proxy-of-nexus-repository/87118)

## post by mpiggott on May 29, 2023

It looks like Gitlab is returning [403](https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/403) on authentication, you’d need to figure out why.