networks:
  web:
    external: true

services:
  registry:
    restart: always
    image: registry:latest
    environment:
      REGISTRY_AUTH: htpasswd
      REGISTRY_AUTH_HTPASSWD_REALM: Registry Realm
      REGISTRY_AUTH_HTPASSWD_PATH: /auth/registry.password
      REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY: /data
    volumes:
      - ./registry/registry.password:/auth/registry.password
      - ./registry/data:/data
    labels:
      - "traefik.enable=true"

      - "traefik.http.services.registry.loadbalancer.server.port=5000"

      - "traefik.http.routers.registry.entrypoints=web"
      - "traefik.http.routers.registry.middlewares=https-redirect@docker"
      - "traefik.http.routers.registry.rule=Host(`${REGISTRY_HOST}`)"

      - "traefik.http.routers.registry-https.entrypoints=websecure"
      - "traefik.http.routers.registry-https.tls=true"
      - "traefik.http.routers.registry-https.tls.certresolver=letsencrypt"
      - "traefik.http.routers.registry-https.rule=Host(`${REGISTRY_HOST}`)"
    networks:
     - web