Private docker registry compose

docker-compose.yml

dockerauth:
  image: cesanta/docker_auth
  ports:
    - "5001:5001"
  volumes:
    - ./auth_server/config:/config:ro
    - ./auth_server/log:/logs
    - ./certs:/certs
  command: /config/auth_config.yml
  restart: always

registry:
  restart: always
  image: registry:2
  ports:
    - 5000:5000
  environment:
    REGISTRY_HTTP_TLS_CERTIFICATE: /certs/domain.crt
    REGISTRY_HTTP_TLS_KEY: /certs/domain.key
    REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY: /var/lib/registry
    REGISTRY_AUTH: token
    REGISTRY_AUTH_TOKEN_REALM: https://docker2.com:5001/auth
    REGISTRY_AUTH_TOKEN_SERVICE: "Docker registry"
    REGISTRY_AUTH_TOKEN_ISSUER: "Auth Service"
    REGISTRY_AUTH_TOKEN_ROOTCERTBUNDLE: /certs/domain.crt
  volumes:
    - ./data:/var/lib/registry
    - ./certs:/certs