[READ-ONLY] Mirror of https://github.com/FoxxMD/docker-proxy-filter. Filter the contents of Docker API responses
docker
docker-socket-proxy
filter
working docker build
+67
+6
Cargo.toml
+6
Cargo.toml
+44
compose.yaml
+44
compose.yaml
···
1
+
services:
2
+
proxy-container:
3
+
image: proxycontainer
4
+
build:
5
+
dockerfile: docker/Dockerfile
6
+
context: .
7
+
env_file: .env
8
+
dockerproxy:
9
+
image: wollomatic/socket-proxy:1.10.0
10
+
restart: unless-stopped
11
+
user: 0:0
12
+
mem_limit: 64M
13
+
read_only: true
14
+
ports:
15
+
- 2379:2375
16
+
cap_drop:
17
+
- ALL
18
+
security_opt:
19
+
- no-new-privileges
20
+
command:
21
+
# - '-loglevel=info'
22
+
23
+
- '-loglevel=debug'
24
+
- '-allowGET=.*'
25
+
- '-allowHEAD=.*'
26
+
- '-allowPOST=.*'
27
+
- '-allowPUT=.*'
28
+
- '-allowPATCH=.*'
29
+
- '-allowDELETE=.*'
30
+
- '-allowCONNECT=.*'
31
+
- '-allowTRACE=.*'
32
+
- '-allowOPTIONS=.*'
33
+
34
+
- '-listenip=0.0.0.0'
35
+
- '-allowfrom=0.0.0.0/0'
36
+
37
+
#- '-allowGET=/_ping|v1\..{1,2}/(info|containers/json|events)'
38
+
#- '-allowGET=/v1\..{1,2}/(version|containers/.*|events.*)'
39
+
- '-allowbindmountfrom=/var/log,/tmp' # restrict bind mounts to specific directories
40
+
- '-watchdoginterval=3600' # check once per hour for socket availability
41
+
- '-stoponwatchdog' # halt program on error and let compose restart it
42
+
- '-shutdowngracetime=5' # wait 5 seconds before shutting down
43
+
volumes:
44
+
- /var/run/docker.sock:/var/run/docker.sock:ro
+12
docker/Dockerfile
+12
docker/Dockerfile
···
1
+
FROM rust:1.90-bookworm as Builder
2
+
3
+
WORKDIR /usr/src/myapp
4
+
COPY . .
5
+
6
+
7
+
RUN cargo install --target x86_64-unknown-linux-gnu --path .
8
+
9
+
FROM debian:bookworm-slim
10
+
RUN apt-get update && apt-get upgrade -y && apt-get install openssl -y && apt clean && rm -rf /var/lib/apt/lists/*
11
+
COPY --from=builder /usr/src/myapp/target/x86_64-unknown-linux-gnu/release/docker-container-proxy /usr/local/bin/myapp
12
+
CMD ["myapp"]