diff --git a/deployment/start-rancher.sh b/deployment/start-rancher.sh
index 2ec9fe7..7507d52 100755
--- a/deployment/start-rancher.sh
+++ b/deployment/start-rancher.sh
@@ -5,8 +5,11 @@ docker run \
 	--privileged \
 	-d \
 	--restart=always \
+	--user root \
 	-e SSL_CERT_DIR=/apps/ssl \
 	--add-host raw.githubusercontent.com:185.199.109.133 \
+	--add-host repository.umisen.com:10.220.10.17 \
+	-v ./registries.yaml:/etc/rancher/k3s/registries.yaml \
 	-v ./data:/data \
     -p 20443:443 \
     -p 80:30080 \
@@ -16,11 +19,13 @@ docker run \
 # -v $(pwd)/ca.crt:/apps/ssl/nf_ca.crt \
 # --add-host repository.umisen.com:10.220.10.17 \
 # --network=host \
-# -p 443:443 \
-# -p 80:80 \
-# -p 30443:30443 \
-# -p 30080:30080 \
 
 # zypper addrepo https://download.opensuse.org/repositories/network:utilities/SLE_15_SP5/network:utilities.repo
 # zypper refresh
 # zypper install net-tools-deprecated
+
+# example registries.yaml
+# configs:
+  # "repository.umisen.com":
+    # tls:
+      # insecure_skip_verify: true