services:
  registry:
    image: registry:2
    restart: always
    environment:
      - REGISTRY_AUTH=htpasswd
      - REGISTRY_AUTH_HTPASSWD_REALM=Registry
      - REGISTRY_AUTH_HTPASSWD_CONTENTS=${REGISTRY_AUTH_HTPASSWD_CONTENTS}
      - REGISTRY_STORAGE_DELETE_ENABLED=true
      - REGISTRY_HTTP_SECRET=something_very_random_and_long
    volumes:
      - /mnt/appdata/docker_registry/data:/var/lib/registry
      # - /mnt/appdata/docker_registry/auth:/auth
    networks:
      - proxy-net
    labels:
      - traefik.enable=true
      - traefik.http.routers.registry.rule=Host(`registry.castaldifamily.com`)
      - traefik.http.routers.registry.entrypoints=websecure
      - traefik.http.routers.registry.tls.certresolver=cloudflare
      - traefik.http.services.registry.loadbalancer.server.port=5000

networks:
  proxy-net:
    name: proxy-net
    external: true