registry:
  image: registry:2
  ports:
    - "5000:5000"
  volumes:
    - /srv/registry2/ssl:/ssl
    - /srv/registry2/data:/var/lib/registry
  restart: always
  environment:
    - REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY=/var/lib/registry
    - REGISTRY_AUTH=token
    - REGISTRY_AUTH_TOKEN_REALM=http://localhost:5001/
    - REGISTRY_AUTH_TOKEN_SERVICE="registry.example.org"
    - REGISTRY_AUTH_TOKEN_ISSUER="C=XX, L=Default City, O=Default Company Ltd, CN=auth.example.org"
    - REGISTRY_AUTH_TOKEN_ROOTCERTBUNDLE=/ssl/server.pem