forked from data.coop/ansible
Sam A.
5d26e1cdea
The auth file created by the registry login task doesn't need to be stored in a non-default path.
36 lines
1.2 KiB
YAML
36 lines
1.2 KiB
YAML
---
|
|
- name: copy docker registry nginx configuration
|
|
copy:
|
|
src: "files/configs/docker_registry/nginx.conf"
|
|
dest: "/docker-volumes/nginx/vhost/{{ docker_registry.domain }}"
|
|
mode: "0644"
|
|
|
|
- name: docker registry container
|
|
docker_container:
|
|
name: registry
|
|
image: registry:2
|
|
restart_policy: always
|
|
volumes:
|
|
- "{{ docker_registry.volume_folder }}/registry:/var/lib/registry"
|
|
- "{{ docker_registry.volume_folder }}/auth:/auth"
|
|
networks:
|
|
- name: external_services
|
|
env:
|
|
VIRTUAL_HOST: "{{ docker_registry.domain }}"
|
|
LETSENCRYPT_HOST: "{{ docker_registry.domain }}"
|
|
LETSENCRYPT_EMAIL: "{{ letsencrypt_email }}"
|
|
REGISTRY_AUTH: "htpasswd"
|
|
REGISTRY_AUTH_HTPASSWD_PATH: "/auth/htpasswd"
|
|
REGISTRY_AUTH_HTPASSWD_REALM: "data.coop docker registry"
|
|
|
|
- name: generate htpasswd file
|
|
shell: "docker exec -it registry htpasswd -Bbn docker {{ docker_password }} > {{ docker_registry.volume_folder }}/auth/htpasswd"
|
|
args:
|
|
creates: "{{ docker_registry.volume_folder }}/auth/htpasswd"
|
|
|
|
- name: log in to registry
|
|
docker_login:
|
|
registry: "{{ docker_registry.domain }}"
|
|
username: "docker"
|
|
password: "{{ docker_password }}"
|