You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
2.0 KiB
2.0 KiB
Docker Socket Readonly Proxy
What?
This is a readonly proxy for the Docker Socket.
Why?
Giving access to your Docker socket could mean giving root access to your host, or even to your whole swarm, but some services require hooking into that socket to react to events, etc. Using this proxy lets you block anything you consider those services should not do.
How?
We use the official Alpine-based HAProxy image with a small configuration file.
It blocks access to the Docker socket API according to the environment
variables you set. It returns a HTTP 403 Forbidden
status for those dangerous
requests that should never happen.
Usage
Feedback
Please send any feedback (issues, questions) to the issue tracker.