services:
  registry:
    image: registry:2
    container_name: docker_registry
    restart: always
    environment:
      - REGISTRY_AUTH=htpasswd
      - REGISTRY_AUTH_HTPASSWD_REALM=Registry
      - REGISTRY_AUTH_HTPASSWD_PATH=/run/secrets/registry_htpasswd
      - REGISTRY_STORAGE_DELETE_ENABLED=true
      - REGISTRY_HTTP_SECRET=something_very_random_and_long
    volumes:
      - /mnt/appdata/docker_registry/data:/var/lib/registry
    networks:
      - proxy-net
    secrets:
      - registry_htpasswd
    labels:
      - traefik.enable=true
      - traefik.http.routers.registry.rule=Host(`registry.castaldifamily.com`)
      - traefik.http.routers.registry.entrypoints=websecure
      - traefik.http.routers.registry.tls.certresolver=cloudflare
      - traefik.http.services.registry.loadbalancer.server.port=5000

secrets:
  registry_htpasswd:
    external: true

networks:
  proxy-net:
    name: proxy-net
    external: true