ansible/plays/docker/service.yaml

- name: Start service
  hosts: docker_reg
  become: true
  tasks:
  - name: Registry
    community.docker.docker_swarm_service:
      name: registry
      image: registry:2
      env:
        REGISTRY_HTTP_TLS_CERTIFICATE: /certs/fullchain.pem
        REGISTRY_HTTP_TLS_KEY: /certs/privkey.pem
        REGISTRY_HTTP_TLS_CLIENTCAS: " - /certs/ca.pem"
      publish: [
        { published_port: 5000, target_port: 5000 }
      ]
      mounts: [
        {
          type: volume,
          driver_config: { name: glusterfs },
          source: docker_registry/data,
          target: /var/lib/registry,
          readonly: no,
        },
        {
          type: volume,
          driver_config: { name: glusterfs },
          source: docker_registry/certs,
          target: /certs,
          readonly: yes,
        }
      ]