gistfile1.txt
· 1.2 KiB · Text
Raw
version: '3.3'
services:
docker-socket-proxy:
privileged: false
container_name: docker-proxy
environment:
- LOG_LEVEL=info # debug,info,notice,warning,err,crit,alert,emerg
## Variables match the URL prefix (i.e. AUTH blocks access to /auth/* parts of the API, etc.).
# 0 to revoke access.
# 1 to grant access.
## Granted by Default
- EVENTS=1
- PING=1
- VERSION=1
## Revoked by Default
# Security critical
- AUTH=0
- SECRETS=0
- POST=0
# Not always needed
- BUILD=0
- COMMIT=0
- CONFIGS=0
- CONTAINERS=1
- DISTRIBUTION=0
- EXEC=0
- IMAGES=0
- GRPC=0
- INFO=1
- NETWORKS=0
- NODES=0
- PLUGINS=0
- SERVICES=0
- SESSION=0
- SWARM=0
- SYSTEM=0
- TASKS=0
- VOLUMES=0
volumes:
- '/var/run/docker.sock:/var/run/docker.sock'
ports:
- '2375:2375'
image: tecnativa/docker-socket-proxy
network_mode: bridge
| 1 | version: '3.3' |
| 2 | services: |
| 3 | docker-socket-proxy: |
| 4 | privileged: false |
| 5 | container_name: docker-proxy |
| 6 | environment: |
| 7 | - LOG_LEVEL=info # debug,info,notice,warning,err,crit,alert,emerg |
| 8 | ## Variables match the URL prefix (i.e. AUTH blocks access to /auth/* parts of the API, etc.). |
| 9 | # 0 to revoke access. |
| 10 | # 1 to grant access. |
| 11 | ## Granted by Default |
| 12 | - EVENTS=1 |
| 13 | - PING=1 |
| 14 | - VERSION=1 |
| 15 | ## Revoked by Default |
| 16 | # Security critical |
| 17 | - AUTH=0 |
| 18 | - SECRETS=0 |
| 19 | - POST=0 |
| 20 | # Not always needed |
| 21 | - BUILD=0 |
| 22 | - COMMIT=0 |
| 23 | - CONFIGS=0 |
| 24 | - CONTAINERS=1 |
| 25 | - DISTRIBUTION=0 |
| 26 | - EXEC=0 |
| 27 | - IMAGES=0 |
| 28 | - GRPC=0 |
| 29 | - INFO=1 |
| 30 | - NETWORKS=0 |
| 31 | - NODES=0 |
| 32 | - PLUGINS=0 |
| 33 | - SERVICES=0 |
| 34 | - SESSION=0 |
| 35 | - SWARM=0 |
| 36 | - SYSTEM=0 |
| 37 | - TASKS=0 |
| 38 | - VOLUMES=0 |
| 39 | volumes: |
| 40 | - '/var/run/docker.sock:/var/run/docker.sock' |
| 41 | ports: |
| 42 | - '2375:2375' |
| 43 | image: tecnativa/docker-socket-proxy |
| 44 | network_mode: bridge |