fix: update Docker registry configuration to use external secrets for htpasswd

This commit is contained in:
Nathan 2026-04-17 15:39:36 -04:00
parent e0976f44e4
commit b291cee84c

View File

@ -6,14 +6,15 @@ services:
environment: environment:
- REGISTRY_AUTH=htpasswd - REGISTRY_AUTH=htpasswd
- REGISTRY_AUTH_HTPASSWD_REALM=Registry - REGISTRY_AUTH_HTPASSWD_REALM=Registry
- REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd # Back to this - REGISTRY_AUTH_HTPASSWD_PATH=/run/secrets/registry_htpasswd
- REGISTRY_STORAGE_DELETE_ENABLED=true - REGISTRY_STORAGE_DELETE_ENABLED=true
- REGISTRY_HTTP_SECRET=something_very_random_and_long - REGISTRY_HTTP_SECRET=something_very_random_and_long
volumes: volumes:
- /mnt/appdata/docker_registry/data:/var/lib/registry - /mnt/appdata/docker_registry/data:/var/lib/registry
- /mnt/appdata/docker_registry/auth:/auth
networks: networks:
- proxy-net - proxy-net
secrets:
- registry_htpasswd
labels: labels:
- traefik.enable=true - traefik.enable=true
- traefik.http.routers.registry.rule=Host(`registry.castaldifamily.com`) - traefik.http.routers.registry.rule=Host(`registry.castaldifamily.com`)
@ -21,6 +22,10 @@ services:
- traefik.http.routers.registry.tls.certresolver=cloudflare - traefik.http.routers.registry.tls.certresolver=cloudflare
- traefik.http.services.registry.loadbalancer.server.port=5000 - traefik.http.services.registry.loadbalancer.server.port=5000
secrets:
registry_htpasswd:
external: true
networks: networks:
proxy-net: proxy-net:
name: proxy-net name: proxy-net