fix registry link

scripts/docker-prod-common.sh

@@ -8,6 +8,8 @@ PORTAINER_COMPOSE_FILE="${ROOT_DIR}/docker-compose.portainer.production.yml"
 REGISTRY_COMPOSE_FILE="${ROOT_DIR}/docker-compose.registry.production.yml"
 TRAEFIK_COMPOSE_FILE="${ROOT_DIR}/traefik.yaml"
 ENV_FILE="${ROOT_DIR}/.env.docker.production"
+DYNAMIC_DIR="${ROOT_DIR}/dynamic"
+REGISTRY_DYNAMIC_FILE="${DYNAMIC_DIR}/registry-upstream.yml"
 PROJECT_NAME="${DOCKER_PROD_PROJECT_NAME:-rentaldrivego-prod}"
 PORTAINER_PROJECT_NAME="${DOCKER_PORTAINER_PROJECT_NAME:-rentaldrivego-portainer-prod}"
 REGISTRY_PROJECT_NAME="${DOCKER_REGISTRY_PROJECT_NAME:-rentaldrivego-registry-prod}"
@@ -39,6 +41,10 @@ ensure_api_uploads_volume() {
   fi
 }
 
+ensure_dynamic_dir() {
+  mkdir -p "${DYNAMIC_DIR}"
+}
+
 prod_compose() {
   docker compose -p "${PROJECT_NAME}" --env-file "${ENV_FILE}" -f "${PROD_COMPOSE_FILE}" "$@"
 }
@@ -149,6 +155,38 @@ start_portainer() {
   portainer_compose up -d
 }
 
+render_registry_proxy_config() {
+  ensure_dynamic_dir
+
+  if [[ -z "${REGISTRY_DOMAIN:-}" && -z "${REGISTRY_UPSTREAM_URL:-}" ]]; then
+    rm -f "${REGISTRY_DYNAMIC_FILE}"
+    return 0
+  fi
+
+  if [[ -z "${REGISTRY_DOMAIN:-}" || -z "${REGISTRY_UPSTREAM_URL:-}" ]]; then
+    echo "REGISTRY_DOMAIN and REGISTRY_UPSTREAM_URL must either both be set or both be unset." >&2
+    exit 1
+  fi
+
+  cat > "${REGISTRY_DYNAMIC_FILE}" <<EOF
+http:
+  routers:
+    registry:
+      rule: Host(\`${REGISTRY_DOMAIN}\`)
+      entryPoints:
+        - websecure
+      tls:
+        certResolver: letsencrypt
+      service: registry-upstream
+
+  services:
+    registry-upstream:
+      loadBalancer:
+        servers:
+          - url: "${REGISTRY_UPSTREAM_URL}"
+EOF
+}
+
 ensure_registry_auth_file() {
   mkdir -p "${REGISTRY_AUTH_DIR}"
 
@@ -176,6 +214,7 @@ start_registry() {
 start_traefik() {
   ensure_env_file
   ensure_traefik_network
+  render_registry_proxy_config
   traefik_compose up -d
 }
 

scripts/docker-registry-local-up.sh

@@ -0,0 +1,32 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+ENV_FILE="${ROOT_DIR}/.env.docker.production"
+COMPOSE_FILE="${ROOT_DIR}/docker-compose.registry.local.yml"
+AUTH_DIR="${ROOT_DIR}/docker/registry/auth"
+AUTH_FILE="${AUTH_DIR}/htpasswd"
+
+if [[ ! -f "${ENV_FILE}" ]]; then
+  echo "Missing ${ENV_FILE}" >&2
+  exit 1
+fi
+
+set -a
+source "${ENV_FILE}"
+set +a
+
+mkdir -p "${AUTH_DIR}"
+
+if [[ -n "${REGISTRY_USER:-}" && -n "${REGISTRY_PASSWORD:-}" ]]; then
+  docker run --rm --entrypoint htpasswd httpd:2-alpine -Bbn "${REGISTRY_USER}" "${REGISTRY_PASSWORD}" > "${AUTH_FILE}"
+  chmod 600 "${AUTH_FILE}"
+elif [[ ! -f "${AUTH_FILE}" ]]; then
+  echo "Set REGISTRY_USER and REGISTRY_PASSWORD in ${ENV_FILE} or create ${AUTH_FILE} manually." >&2
+  exit 1
+fi
+
+docker compose -p rentaldrivego-registry-local --env-file "${ENV_FILE}" -f "${COMPOSE_FILE}" up -d
+
+echo "Local registry is starting on port 5000."