Doubling up on encryption?

[steve-taylor]

Why do registry's REGISTRY_HTTP_TLS_CERTIFICATE and REGISTRY_HTTP_TLS_KEY environment variables need to be set when lets-nginx is already placing a TLS layer in front of registry? Can't registry just accept plain HTTP requests over port 5000? It would stop registry from restarting 50 times because it can't find the certs until lets-nginx finishes doing its thing with letsencrypt.

Also, UPSTREAM is set to registry:80, but registry listens on port 5000.