---
services:
  registry:
    container_name: registry
    restart: always
    labels:
      - "com.centurylinklabs.watchtower.scope=update"
      - "traefik.enable=true"
      - "traefik.http.routers.registry.rule=Host(`registry.tobiasmanske.de`)"
      - "traefik.http.routers.registry.entryPoints=websecure"
      - "traefik.http.services.registry.loadbalancer.server.port=5000"
    image: 'registry:2'
    networks:
      - gateway
      - backend
    volumes:
      - registry_data:/var/lib/registry
      - ./htpasswd:/auth/htpasswd:ro,z
      - ./config.yaml:/etc/docker/registry/config.yml:ro,z

  frontend:
    image: joxit/docker-registry-ui:latest
    restart: unless-stopped
    depends_on:
      - registry
    environment:
      - DELETE_IMAGES=true
      - REGISTRY_TITLE=My Private Docker Registry
      - NGINX_PROXY_PASS_URL=http://registry:5000
      - SINGLE_REGISTRY=true
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.registryui.rule=Host(`registry-ui.tobiasmanske.de`)"
      - "traefik.http.routers.registryui.entryPoints=websecure"
      - "traefik.http.services.registryui.loadbalancer.server.port=80"
      - "com.centurylinklabs.watchtower.scope=update"
    networks:
      - gateway
      - backend


volumes:
  registry_data:

networks:
  gateway:
    external: true
  backend:
    internal: true
...