version: "3.2"

services:

  registry:
     image: registry:2.6.2
     environment:
       - REGISTRY_HTTP_TLS_CERTIFICATE=/run/secrets/sdsys_full
       - REGISTRY_HTTP_TLS_KEY=/run/secrets/sdsys_full
     deploy:
       replicas: 1
       labels:
         - com.df.notify=true
         - com.df.distribute=true
         - com.df.serviceDomain=registry.sdsys.ru
         - com.df.servicePath=/
         - com.df.port=5000
         - com.df.sslVerifyNone=true
         - com.df.httpsOnly=true
         - com.df.verifyClientSsl=true
     volumes:
       - lregistry:/var/lib/registry
     networks:
       - proxy
     secrets:
       - sdsys_full

#volumes:
#  registry:
#    driver: rexray
#    driver_opts:
#      size: 100

volumes:
  lregistry:
    driver: local
    driver_opts:
        device: "/dev/disk/by-label/registry"
        type: "xfs"

secrets:
  sdsys_full:
    external: true
    
networks:
  proxy:
    external: true