version: "3.7"
services:
  letsencrypt-registry:
    deploy:
      placement:
        constraints: [node.labels.com.sigyl.git-stack == yes]
      replicas: 1
      restart_policy:
        condition: any
    image: ${LOCAL_DOCKER_REGISTRY}letsencrypt-registry
    environment:
      - CERTBOT_EMAIL=${CERTBOT_EMAIL}
      - SERVER_NAME=${GIT_DOMAIN}
      - REGISTRY_PROXY_PASS=http://registry:5000
    volumes:
      - letsencrypt-registry:/etc/letsencrypt
    networks:
      - appnet
    ports:
      - 5004:5004
  registry:
    # internal registry #1 (why?)
    deploy:
      placement:
        constraints: [node.labels.com.sigyl.git-stack == yes]
      replicas: 1
      restart_policy:
        condition: any
    image: registry:2
    volumes:
      - registry-data:/var/lib/registry
    environment:
      - REGISTRY_HTTP_ADDR=0.0.0.0:5000
    networks:
      - appnet
volumes:
  registry-data:
  letsencrypt-registry:

networks:
  appnet:
    driver: overlay
    #external: true