[READ-ONLY] Mirror of https://github.com/FoxxMD/docker-proxy-filter. Filter the contents of Docker API responses
docker
docker-socket-proxy
filter
update readme and compose
+41
-24
+1
-1
README.md
+1
-1
README.md
+31
compose.build.yaml
+31
compose.build.yaml
···
1
+
services:
2
+
proxy-container:
3
+
image: docker-proxy-filter
4
+
build:
5
+
dockerfile: docker/Dockerfile
6
+
context: .
7
+
env_file: .env
8
+
ports:
9
+
- 2375:2375
10
+
socket-proxy:
11
+
image: wollomatic/socket-proxy:1.10.0
12
+
restart: unless-stopped
13
+
user: 0:0
14
+
mem_limit: 64M
15
+
read_only: true
16
+
cap_drop:
17
+
- ALL
18
+
security_opt:
19
+
- no-new-privileges
20
+
command:
21
+
- '-loglevel=debug'
22
+
- '-listenip=0.0.0.0'
23
+
- '-allowfrom=proxy-container'
24
+
25
+
- '-allowGET=/_ping|/(v1\..{1,2}/)?(info|version|containers|events).*'
26
+
- '-allowbindmountfrom=/var/log,/tmp' # restrict bind mounts to specific directories
27
+
- '-watchdoginterval=3600' # check once per hour for socket availability
28
+
- '-stoponwatchdog' # halt program on error and let compose restart it
29
+
- '-shutdowngracetime=5' # wait 5 seconds before shutting down
30
+
volumes:
31
+
- /var/run/docker.sock:/var/run/docker.sock:ro
+9
-23
compose.yaml
+9
-23
compose.yaml
···
1
1
services:
2
2
proxy-container:
3
-
image: proxycontainer
4
-
build:
5
-
dockerfile: docker/Dockerfile
6
-
context: .
7
-
env_file: .env
8
-
dockerproxy:
3
+
image: foxxmd/docker-proxy-filter
4
+
environment:
5
+
- PROXY_URL=http://socket-proxy:2375
6
+
- CONTAINER_NAME=foo,bar
7
+
ports:
8
+
- 2375:2375
9
+
socket-proxy:
9
10
image: wollomatic/socket-proxy:1.10.0
10
11
restart: unless-stopped
11
12
user: 0:0
12
13
mem_limit: 64M
13
14
read_only: true
14
-
ports:
15
-
- 2379:2375
16
15
cap_drop:
17
16
- ALL
18
17
security_opt:
19
18
- no-new-privileges
20
19
command:
21
-
# - '-loglevel=info'
22
-
23
20
- '-loglevel=debug'
24
-
- '-allowGET=.*'
25
-
- '-allowHEAD=.*'
26
-
- '-allowPOST=.*'
27
-
- '-allowPUT=.*'
28
-
- '-allowPATCH=.*'
29
-
- '-allowDELETE=.*'
30
-
- '-allowCONNECT=.*'
31
-
- '-allowTRACE=.*'
32
-
- '-allowOPTIONS=.*'
33
-
34
21
- '-listenip=0.0.0.0'
35
-
- '-allowfrom=0.0.0.0/0'
22
+
- '-allowfrom=proxy-container'
36
23
37
-
#- '-allowGET=/_ping|v1\..{1,2}/(info|containers/json|events)'
38
-
#- '-allowGET=/v1\..{1,2}/(version|containers/.*|events.*)'
24
+
- '-allowGET=/_ping|/(v1\..{1,2}/)?(info|version|containers|events).*'
39
25
- '-allowbindmountfrom=/var/log,/tmp' # restrict bind mounts to specific directories
40
26
- '-watchdoginterval=3600' # check once per hour for socket availability
41
27
- '-stoponwatchdog' # halt program on error and let compose restart it