services:
  registry:
    image: registry:2
    container_name: registry_registry
    restart: unless-stopped
    environment:
      - REGISTRY_AUTH=htpasswd
      - REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd
      - REGISTRY_AUTH_HTPASSWD_REALM=Registry Realm
    volumes:
      - registry_registry:/var/lib/registry
      - registry_auth:/auth
    networks:
      - traefik-network
    labels:
      - "traefik.enable=true"
      - traefik.docker.network=traefik-network
      - traefik.http.routers.registry.rule=Host(`registry.odamus.com`)
      - traefik.http.routers.registry.entrypoints=web
      - traefik.http.routers.registry-secure.rule=Host(`registry.odamus.com`)
      - traefik.http.routers.registry-secure.entrypoints=websecure
      - "traefik.http.routers.registry-secure.tls.certresolver=mychallenge"
      - traefik.http.services.registry.loadbalancer.server.port=5000

volumes:
  registry_registry:
    external: true
  registry_auth:
    external: true

networks:
  traefik-network:
    external: true