ansible/roles/docker/tasks/services/docker_registry.yml

---
- name: copy docker registry nginx configuration
  ansible.builtin.copy:
    src: files/configs/docker_registry/nginx.conf
    dest: /docker-volumes/nginx/vhost/{{ services.docker_registry.domain }}
    mode: '0644'

- name: docker registry container
  community.docker.docker_container:
    name: registry
    image: registry:{{ services.docker_registry.version }}
    restart_policy: always
    volumes:
      - '{{ services.docker_registry.volume_folder }}/registry:/var/lib/registry'
      - '{{ services.docker_registry.volume_folder }}/auth:/auth'
    networks:
      - name: external_services
    env:
      VIRTUAL_HOST: '{{ services.docker_registry.domain }}'
      LETSENCRYPT_HOST: '{{ services.docker_registry.domain }}'
      LETSENCRYPT_EMAIL: '{{ letsencrypt_email }}'
      REGISTRY_AUTH: htpasswd
      REGISTRY_AUTH_HTPASSWD_PATH: /auth/htpasswd
      REGISTRY_AUTH_HTPASSWD_REALM: data.coop docker registry

- name: generate htpasswd file
  shell: docker exec -it registry htpasswd -Bbn docker {{ docker_password }} > services.docker_registry.volume_folder
    }}/auth/htpasswd
  args:
    creates: '{{ services.docker_registry.volume_folder }}/auth/htpasswd'

- name: log in to registry
  docker_login:
    registry: "{{ 'docker.data.coop' if vagrant else services.docker_registry.domain\
      \  }}"
    username: docker
    password: '{{ docker_password }}'