services:
  registry:
    image: registry:2
    container_name: registry
    restart: unless-stopped
    volumes:
      - ./data:/var/lib/registry
      - ./auth:/auth
    environment:
      REGISTRY_AUTH: htpasswd
      REGISTRY_AUTH_HTPASSWD_REALM: Registry Realm
      REGISTRY_AUTH_HTPASSWD_PATH: /auth/htpasswd
      REGISTRY_HTTP_SECRET: ${REGISTRY_HTTP_SECRET}
    expose:
      - 5000
    networks:
      - web
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.registry.entrypoints=https"
      - "traefik.http.routers.registry.rule=Host(`registry.${DOMAIN}`)"
      - "traefik.http.routers.registry.tls.certresolver=http"
      - "traefik.http.services.registry.loadbalancer.server.port=5000"

networks:
  web:
    external: true