don't verify SSL in runner not server

docker-compose.yaml

@@ -1,23 +1,22 @@
 services:
-  registry:
-    image: registry:2
-    container_name: registry
-    ports:
-      - "5000:5000"
-    volumes:
-      - /home/aetos/registry:/var/lib/registry
-    restart: always
-
   registry-ui:
     image: joxit/docker-registry-ui:latest
     container_name: registry-ui
     ports:
       - "6001:80"
+    volumes:
+      - /home/aetos/registry/auth:/auth:ro
     environment:
-      REGISTRY_URL: http://registry:5000
+      REGISTRY_TITLE: "Armory of the Codex"
+      REGISTRY_URL: http://dcr.aetoskia.com
+
+      REGISTRY_AUTH: "htpasswd"
+      REGISTRY_AUTH_HTPASSWD_PATH: "/auth/htpasswd"
     depends_on:
       - registry
     restart: always
+    extra_hosts:
+      - "dcr.aetoskia.com:192.168.1.111"
 
   gitea:
     image: gitea/gitea:latest
@@ -31,6 +30,8 @@ services:
       - "222:22"     # SSH
     volumes:
       - /home/aetos/gitea:/data
+    extra_hosts:
+      - "drone.aetoskia.com:192.168.1.111"
 
   drone-server:
     image: drone/drone:2
@@ -53,18 +54,40 @@ services:
       - "gitea.aetoskia.com:192.168.1.111"
 
   drone-runner:
-    image: drone/drone-runner-docker:1
+    image: drone/drone-runner-docker:latest
     container_name: drone-runner
     restart: always
     depends_on:
       - drone-server
     ports:
-      - "3000:3000"   # optional: exposes runner metrics/debug UI
+      - "6004:3000"   # optional: exposes runner metrics/debug UI
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
     environment:
       DRONE_RPC_PROTO: http
-      DRONE_RPC_HOST: drone-server:80   # matches service name + port inside Docker network
+      DRONE_RPC_HOST: drone.aetoskia.com
       DRONE_RPC_SECRET: supersecretkey
       DRONE_RUNNER_CAPACITY: 2
       DRONE_RUNNER_NAME: runner1
+      DRONE_RUNNER_OS: linux
+      DRONE_RUNNER_ARCH: arm64
+      DRONE_LOGS_DEBUG: true
+      DRONE_LOGS_TRACE: true
+      GIT_SSL_NO_VERIFY: true
+    extra_hosts:
+      - "drone.aetoskia.com:192.168.1.111"
+
+  registry:
+    image: registry:2
+    container_name: registry
+    ports:
+      - "6005:5000"
+    volumes:
+      - /home/aetos/registry:/var/lib/registry
+      - /home/aetos/registry/auth:/auth:ro
+      - ./registry/config.yml:/etc/docker/registry/config.yml:ro
+    environment:
+      REGISTRY_AUTH: htpasswd
+      REGISTRY_AUTH_HTPASSWD_REALM: "Registry Realm"
+      REGISTRY_AUTH_HTPASSWD_PATH: /auth/htpasswd
+    restart: always

registry/config.yml

@@ -0,0 +1,17 @@
+version: 0.1
+log:
+  level: debug
+http:
+  addr: :5000
+  headers:
+    Access-Control-Allow-Origin: ["http://registry.aetoskia.com"]
+    Access-Control-Allow-Methods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"]
+    Access-Control-Allow-Headers: ["Authorization", "Content-Type"]
+    Access-Control-Expose-Headers: ["Docker-Content-Digest"]
+storage:
+  filesystem:
+    rootdirectory: /var/lib/registry
+auth:
+  htpasswd:
+    realm: basic-realm
+    path: /auth/htpasswd