version: "3.7" services: letsencrypt-registry: deploy: placement: constraints: [node.labels.com.sigyl.git-stack == yes] replicas: 0 restart_policy: condition: any image: ${LOCAL_DOCKER_REGISTRY}letsencrypt-git environment: - CERTBOT_EMAIL=${CERTBOT_EMAIL} - SERVER_NAME=${GIT_DOMAIN} - REGISTRY_PROXY_PASS=http://registry:5000 volumes: - letsencrypt-registry:/etc/letsencrypt networks: - appnet ports: - 5004:5004 registry: # internal registry #1 (why?) deploy: placement: constraints: [node.labels.com.sigyl.git-stack == yes] replicas: 1 restart_policy: condition: any image: registry:2 volumes: - registry-data:/var/lib/registry environment: - REGISTRY_HTTP_ADDR=0.0.0.0:5000 networks: - appnet volumes: registry-data: letsencrypt-registry: networks: appnet: driver: overlay #external: true