Naposledy aktivní 1685797664

This is a security-enhanced proxy for the Docker Socket.

simmons777 revidoval tento gist 1685797664. Přejít na revizi

1 file changed, 44 insertions

gistfile1.txt(vytvořil soubor)

@@ -0,0 +1,44 @@
1 + version: '3.3'
2 + services:
3 + docker-socket-proxy:
4 + privileged: false
5 + container_name: docker-proxy
6 + environment:
7 + - LOG_LEVEL=info # debug,info,notice,warning,err,crit,alert,emerg
8 + ## Variables match the URL prefix (i.e. AUTH blocks access to /auth/* parts of the API, etc.).
9 + # 0 to revoke access.
10 + # 1 to grant access.
11 + ## Granted by Default
12 + - EVENTS=1
13 + - PING=1
14 + - VERSION=1
15 + ## Revoked by Default
16 + # Security critical
17 + - AUTH=0
18 + - SECRETS=0
19 + - POST=0
20 + # Not always needed
21 + - BUILD=0
22 + - COMMIT=0
23 + - CONFIGS=0
24 + - CONTAINERS=1
25 + - DISTRIBUTION=0
26 + - EXEC=0
27 + - IMAGES=0
28 + - GRPC=0
29 + - INFO=1
30 + - NETWORKS=0
31 + - NODES=0
32 + - PLUGINS=0
33 + - SERVICES=0
34 + - SESSION=0
35 + - SWARM=0
36 + - SYSTEM=0
37 + - TASKS=0
38 + - VOLUMES=0
39 + volumes:
40 + - '/var/run/docker.sock:/var/run/docker.sock'
41 + ports:
42 + - '2375:2375'
43 + image: tecnativa/docker-socket-proxy
44 + network_mode: bridge
Novější Starší