services:
  registry:
    container_name: docker_registry
    image: registry:3.0.0
    restart: unless-stopped
    user: 2014:2014 # docker_registry:docker_registry
    secrets:
      - registry_auth_htpasswd
    environment:
      - "REGISTRY_AUTH=htpasswd"
      - "REGISTRY_AUTH_HTPASSWD_REALM=basic-realm"
      - "REGISTRY_AUTH_HTPASSWD_PATH=/run/secrets/registry_auth_htpasswd"
      - "REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY=/var/lib/registry"
      - "REGISTRY_HTTP_HOST=https://registry.leaf.home.kappeh.org"
      - "REGISTRY_HTTP_HEADERS_Access-Control-Allow-Origin=['https://docker.leaf.home.kappeh.org']"
      - "REGISTRY_HTTP_HEADERS_Access-Control-Allow-Methods=['HEAD','GET','OPTIONS']"
      - "REGISTRY_HTTP_HEADERS_Access-Control-Allow-Credentials=[true]"
      - "REGISTRY_HTTP_HEADERS_Access-Control-Allow-Headers=['Authorization','Accept','Cache-Control']"
      - "REGISTRY_HTTP_HEADERS_Access-Control-Expose-Headers=['Docker-Content-Digest']"
      - "REGISTRY_STORAGE_DELETE_ENABLED=false"
      - "OTEL_TRACES_EXPORTER=none"
    networks:
      - docker_registry_network
    ports:
      - 5000:5000
    volumes:
      - /mnt/docker_registry_2/data:/var/lib/registry:rw

  registry_ui:
    container_name: docker_registry_ui
    image: joxit/docker-registry-ui:2.5.7
    restart: unless-stopped
    # user: 2014:2014 # docker_registry:docker_registry
    environment:
      - "SINGLE_REGISTRY=true"
      - "REGISTRY_URL=https://registry.leaf.home.kappeh.org"
      - "REGISTRY_TITLE=Local Docker Registry"
      - "DELETE_IMAGES=false"
      - "SHOW_CONTENT_DIGEST=true"
      - "SHOW_CATALOG_NB_TAGS=true"
      - "CATALOG_MIN_BRANCHES=1"
      - "CATALOG_MAX_BRANCHES=1"
      - "TAGLIST_PAGE_SIZE=100"
      - "REGISTRY_SECURED=true"
      - "THEME=dark"
    networks:
      - docker_registry_network
    ports:
      - 5002:80 

secrets:
  registry_auth_htpasswd:
    file: ./htpasswd

networks:
  docker_registry_network:
    name: docker_registry_network