| 1 | version: '3.3' |
| 2 | services: |
| 3 | docker-socket-proxy: |
| 4 | privileged: false |
| 5 | container_name: docker-proxy |
| 6 | environment: |
| 7 | - LOG_LEVEL=info # debug,info,notice,warning,err,crit,alert,emerg |
| 8 | ## Variables match the URL prefix (i.e. AUTH blocks access to /auth/* parts of the API, etc.). |
| 9 | # 0 to revoke access. |
| 10 | # 1 to grant access. |
| 11 | ## Granted by Default |
| 12 | - EVENTS=1 |
| 13 | - PING=1 |
| 14 | - VERSION=1 |
| 15 | ## Revoked by Default |
| 16 | # Security critical |
| 17 | - AUTH=0 |
| 18 | - SECRETS=0 |
| 19 | - POST=0 |
| 20 | # Not always needed |
| 21 | - BUILD=0 |
| 22 | - COMMIT=0 |
| 23 | - CONFIGS=0 |
| 24 | - CONTAINERS=1 |
| 25 | - DISTRIBUTION=0 |
| 26 | - EXEC=0 |
| 27 | - IMAGES=0 |
| 28 | - GRPC=0 |
| 29 | - INFO=1 |
| 30 | - NETWORKS=0 |
| 31 | - NODES=0 |
| 32 | - PLUGINS=0 |
| 33 | - SERVICES=0 |
| 34 | - SESSION=0 |
| 35 | - SWARM=0 |
| 36 | - SYSTEM=0 |
| 37 | - TASKS=0 |
| 38 | - VOLUMES=0 |
| 39 | volumes: |
| 40 | - '/var/run/docker.sock:/var/run/docker.sock' |
| 41 | ports: |
| 42 | - '2375:2375' |
| 43 | image: tecnativa/docker-socket-proxy |
| 44 | network_mode: bridge |
simmons777 / Docker Socket Proxy
Last active 2 months ago
This is a security-enhanced proxy for the Docker Socket.
Revision 8de16d8b86ac69b1eda5bf04f2b2d22748fa0715