Private Docker registry with Let's Encrypt

.bash_profile

#!/usr/bin/env bash

export REGISTRY_DOMAIN=docker.example.com
export DOMAIN_ADMIN_EMAIL=admin@example.com
export REGISTRY_USER=docker

start-registry.sh

#!/usr/bin/env bash

set -e

mkdir -p volumes/registry/auth
read -sp "Enter a new password for user '${REGISTRY_USER}': " REGISTRY_PASS
docker run --rm --entrypoint htpasswd registry:2 -Bbn ${REGISTRY_USER} "${REGISTRY_PASS}" > volumes/registry/auth/htpasswd

docker run -d --name registry --restart=always \
  -p 5000:5000 \
  -v $(pwd)/volumes/registry/var/lib/registry:/var/lib/registry \
  -v $(pwd)/volumes/registry/auth:/auth \
  -e REGISTRY_HTTP_HOST=https://${REGISTRY_DOMAIN} \
  -e REGISTRY_AUTH_HTPASSWD_REALM=${REGISTRY_DOMAIN} \
  -e REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd \
  registry:2

docker run -d --name lets-nginx --restart=always \
  --link registry:registry \
  -p 80:80 \
  -p 443:443 \
  -v $(pwd)/volumes/lets-nginx/cache:/cache \
  -v $(pwd)/volumes/lets-nginx/etc/letsencrypt:/etc/letsencrypt \
  -e EMAIL=${DOMAIN_ADMIN_EMAIL} \
  -e DOMAIN=${REGISTRY_DOMAIN} \
  -e UPSTREAM=registry:5000 \
  smashwilson/lets-nginx

stop-registry.sh

#!/usr/bin/env bash

docker stop lets-nginx
docker stop registry