fix: update Docker registry configuration to use correct htpasswd path and remove secrets

This commit is contained in:
Nathan 2026-04-17 15:48:56 -04:00
parent b291cee84c
commit 7ecfda8fd7

View File

@ -1,20 +1,23 @@
services: services:
registry: registry:
image: registry:2 image: registry:2
container_name: docker_registry
restart: always restart: always
environment: environment:
- REGISTRY_AUTH=htpasswd - REGISTRY_AUTH=htpasswd
- REGISTRY_AUTH_HTPASSWD_REALM=Registry - REGISTRY_AUTH_HTPASSWD_REALM=Registry
- REGISTRY_AUTH_HTPASSWD_PATH=/run/secrets/registry_htpasswd # We point this to a path that we will 'fake' inside the container
- REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd
- REGISTRY_STORAGE_DELETE_ENABLED=true - REGISTRY_STORAGE_DELETE_ENABLED=true
- REGISTRY_HTTP_SECRET=something_very_random_and_long - REGISTRY_HTTP_SECRET=something_very_random_and_long
# We pass the raw hash string here
- HT_CONTENTS=${REGISTRY_AUTH_HTPASSWD_CONTENTS}
# Create the file on the fly before the registry starts
command: >
sh -c "mkdir -p /auth && echo \"$$HT_CONTENTS\" > /auth/htpasswd && exec bin/registry serve /etc/docker/registry/config.yml"
volumes: volumes:
- /mnt/appdata/docker_registry/data:/var/lib/registry - /mnt/appdata/docker_registry/data:/var/lib/registry
networks: networks:
- proxy-net - proxy-net
secrets:
- registry_htpasswd
labels: labels:
- traefik.enable=true - traefik.enable=true
- traefik.http.routers.registry.rule=Host(`registry.castaldifamily.com`) - traefik.http.routers.registry.rule=Host(`registry.castaldifamily.com`)
@ -22,10 +25,6 @@ services:
- traefik.http.routers.registry.tls.certresolver=cloudflare - traefik.http.routers.registry.tls.certresolver=cloudflare
- traefik.http.services.registry.loadbalancer.server.port=5000 - traefik.http.services.registry.loadbalancer.server.port=5000
secrets:
registry_htpasswd:
external: true
networks: networks:
proxy-net: proxy-net:
name: proxy-net name: proxy-net