docker network create \
	--driver overlay \
	--attachable \
	internal-network

docker service create \
	--name nginx \
	--publish 80:80 \
	--publish 443:443 \
	--mount type=bind,source=/etc/letsencrypt/,target=/etc/letsencrypt/,readonly \
	--mount type=bind,source=/etc/ssl/certs/dhparam.pem,target=/etc/ssl/certs/dhparam.pem,readonly \
	--constraint 'node.role == manager' \
	--network internal-network \
	registry.dbogatov.org/dbogatov/nginx-config:latest

docker pull registry.dbogatov.org/dbogatov/nginx-config:latest
docker service update --image registry.dbogatov.org/dbogatov/nginx-config:latest nginx