version: '2'

db:
  image: mysql:5.7.10
  environment:
    MYSQL_DATABASE: portus
    MYSQL_ROOT_PASSWORD: Password12
    MYSQL_USER: portus
    MYSQL_PASSWORD: Password12
  tty: true
  stdin_open: true
  volumes:
  - registry/db:/var/lib/mysql
  volume_driver: azurefile
  labels:
    registry.portus.db: 1
sslproxy:
  image: nginx:1.9.9
  tty: true
  stdin_open: true
  links:
  - portus:portus
  volumes:
  - registry/certs:/etc/nginx/certs:ro
  - registry/proxy:/etc/nginx/conf.d:ro
  volume_driver: azurefile
  labels:
    io.rancher.scheduler.affinity:container_label_soft: registry.portus.db=1
registry:
  image: registry:2.3.1
  environment:
    REGISTRY_LOG_LEVEL: warn
    REGISTRY_STORAGE_DELETE_ENABLED: true
    REGISTRY_AUTH: token
    REGISTRY_AUTH_TOKEN_REALM: https://myregistry:443/v2/token
    REGISTRY_AUTH_TOKEN_SERVICE: myregistry:5000
    REGISTRY_AUTH_TOKEN_ISSUER: myregistry
    REGISTRY_AUTH_TOKEN_ROOTCERTBUNDLE: /certs/registry.crt
    REGISTRY_HTTP_TLS_CERTIFICATE: /certs/registry.crt
    REGISTRY_HTTP_TLS_KEY: /certs/registry.key
    REGISTRY_HTTP_SECRET: httpsecret
    REGISTRY_NOTIFICATIONS_ENDPOINTS: >
      - name: portus
        url: http://portus:3000/v2/webhooks/events
        timeout: 500
        threshold: 5
        backoff: 1
  tty: true
  stdin_open: true
  links:
  - portus:portus
  volumes:
  - registry/certs:/certs
  - registry/data:/var/lib/registry
  volume_driver: azurefile
lb:
  image: rancher/load-balancer-service
  tty: true
  stdin_open: true
  ports:
  - 5000:5000/tcp
  - 443:443/tcp
  labels:
    io.rancher.loadbalancer.target.sslproxy: 443=443
    io.rancher.loadbalancer.target.registry: 5000=5000
    io.rancher.scheduler.global: 'true'
    io.rancher.scheduler.affinity:not_host_label: lb=0
    io.rancher.scheduler.affinity:not_host_label: registry.enabled=false
  links:
  - registry:registry
  - sslproxy:sslproxy
portus:
  image: sshipway/portus:2.0.5
  environment:
    PORTUS_MACHINE_FQDN: myregistry
    PORTUS_PRODUCTION_HOST: db
    PORTUS_PRODUCTION_DATABASE: portus
    PORTUS_PRODUCTION_USERNAME: portus
    PORTUS_PRODUCTION_PASSWORD: Password12
    PORTUS_GRAVATAR_ENABLED: true
    PORTUS_KEY_PATH: /certs/registry.key
    PORTUS_PASSWORD: Password12
    PORTUS_SECRET_KEY_BASE: Password12
    PORTUS_CHECK_SSL_USAGE_ENABLED: true
    PORTUS_SMTP_ENABLED: false
    PORTUS_LDAP_ENABLED: false
    PORTUS_LDAP_HOSTNAME: ldap.company.com
    PORTUS_LDAP_PORT: 389
    PORTUS_LDAP_METHOD: starttls
    PORTUS_LDAP_BASE: ou=People,dc=company,dc=com
    PORTUS_LDAP_UID: cn
    PORTUS_LDAP_AUTHENTICATION_ENABLED: false
    PORTUS_LDAP_AUTHENTICATION_BIND_DN: ou=portus,dc=company,dc=com
    PORTUS_LDAP_AUTHENTICATION_PASSWORD: password
    PORTUS_LDAP_GUESS_EMAIL_ENABLED: true
    PORTUS_LDAP_GUESS_EMAIL_ATTR: mail
    PORTUS_PORT: 443
    REGISTRY_SSL_ENABLED: true
    REGISTRY_HOSTNAME: myregistry
    REGISTRY_PORT: 5000
    REGISTRY_NAME: Registry
  tty: true
  stdin_open: true
  volumes:
  - registry/certs:/certs
  - registry/proxy:/etc/nginx/conf.d
  volume_driver: azurefile
  links:
  - db:db
  labels:
    io.rancher.container.pull_image: always
    io.rancher.scheduler.affinity:container_label_soft: registry.portus.db=1
    registry.portus.app: 1