Github containter registry behind Traefik reverse proxy

services:
  gitlab:
    environment:
      GITLAB_OMNIBUS_CONFIG: 
        registry_external_url 'http://registry.moki.org.pl'
        registry['enable'] = true
        gitlab_rails['registry_enabled'] = true
        registry_nginx['listen_port'] = 5005
        registry_nginx['listen_https'] = false
        registry_nginx['proxy_set_headers'] = {
                "Host" => "$$http_host",
                "X-Real-IP" => "$$remote_addr",
                "X-Forwarded-For" => "$$proxy_add_x_forwarded_for",
                "X-Forwarded-Proto" => "https",
                "X-Forwarded-Ssl" => "on"
        }
        gitlab_rails['rack_attack_git_basic_auth'] = {
                'enabled' => true,
                'ip_whitelist' => ["127.0.0.1"],
                'maxretry' => 10,
                'findtime' => 600,
                'bantime' => 136000
        }
    labels:
            traefik.enable: "true"

            traefik.http.routers.registry.rule: Host(`registry.moki.org.pl`)
            traefik.http.routers.registry.entrypoints: websecure
            traefik.http.routers.registry.service: registry
            traefik.http.routers.registry.tls.certresolver: letsencryptresolver
            traefik.http.services.registry.loadbalancer.server.port: 5005

            traefik.http.routers.registry-https-redirect.entrypoints: web
            traefik.http.routers.registry-https-redirect.rule: Host(`registry.mydomain.com`)
            traefik.http.routers.registry-https-redirect.middlewares: registry-https-redirect
            traefik.http.middlewares.registry-https-redirect.redirectscheme.scheme: https