diff --git a/example/config.yml b/example/config.yml
index 6c98f4e..fa3a47c 100644
--- a/example/config.yml
+++ b/example/config.yml
@@ -200,6 +200,7 @@ HARBOR_VER: "__harbor__"
 HARBOR_DOMAIN: "harbor.easzlab.io.local"
 HARBOR_PATH: /var/data
 HARBOR_TLS_PORT: 8443
+HARBOR_REGISTRY: "{{ HARBOR_DOMAIN }}:{{ HARBOR_TLS_PORT }}"
 
 # if set 'false', you need to put certs named harbor.pem and harbor-key.pem in directory 'down'
 HARBOR_SELF_SIGNED_CERT: true
diff --git a/roles/containerd/templates/config.toml.j2 b/roles/containerd/templates/config.toml.j2
index bca426e..07dcebd 100644
--- a/roles/containerd/templates/config.toml.j2
+++ b/roles/containerd/templates/config.toml.j2
@@ -139,11 +139,16 @@ version = 2
         [plugins."io.containerd.grpc.v1.cri".registry.configs."easzlab.io.local:5000".tls]
           insecure_skip_verify = true
 
+        [plugins."io.containerd.grpc.v1.cri".registry.configs."{{ HARBOR_REGISTRY }}".tls]
+          insecure_skip_verify = true
+
       [plugins."io.containerd.grpc.v1.cri".registry.headers]
 
       [plugins."io.containerd.grpc.v1.cri".registry.mirrors]
         [plugins."io.containerd.grpc.v1.cri".registry.mirrors."easzlab.io.local:5000"]
           endpoint = ["http://easzlab.io.local:5000"]
+        [plugins."io.containerd.grpc.v1.cri".registry.mirrors."{{ HARBOR_REGISTRY }}"]
+          endpoint = ["https://{{ HARBOR_REGISTRY }}"]
 {% if ENABLE_MIRROR_REGISTRY %}
         [plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.io"]
           endpoint = ["https://docker.nju.edu.cn/", "https://kuamavit.mirror.aliyuncs.com"]