---
services:
  registry:
    container_name: registry
    restart: always
    labels:
      - "com.centurylinklabs.watchtower.scope=update"
      - "traefik.enable=true"
      - "traefik.http.routers.registry.rule=Host(`registry.tobiasmanske.de`)"
      - "traefik.http.routers.registry.entryPoints=websecure"
      - "traefik.http.services.registry.loadbalancer.server.port=5000"
    image: 'registry:2'
    networks:
      - gateway
    environment:
      REGISTRY_AUTH: htpasswd
      REGISTRY_AUTH_HTPASSWD_PATH: /auth/htpasswd
      REGISTRY_AUTH_HTPASSWD_REALM: Registry Realm
    volumes:
      - registry_data:/var/lib/registry
      - ./htpasswd:/auth/htpasswd:ro,z

volumes:
  registry_data:

networks:
  gateway:
    external: true
...