loxoo/proxy-socket repository overview

⁠loxoo/proxy-socket⁠

⁠Usage

docker run -d \
    --name=srvproxy-socket \
    --restart=unless-stopped \
    --hostname=srvproxy-socket \
    --privileged \
    -p 127.0.0.1:2375:2375 \
    -v /var/run/docker.sock:/var/run/docker.sock:ro \
    loxoo/proxy-socket

⁠Environment

⁠Access granted by default

These API sections are mostly harmless and almost required for any service that uses the API, so they are granted by default.

• $EVENTS
• $PING
• $VERSION

⁠Access revoked by default

⁠Security-critical

These API sections are considered security-critical, and thus access is revoked by default. Maximum caution when enabling these.

• $ALLOW_RESTARTS
• $AUTH
• $SECRETS
• $POST: When disabled, only GET and HEAD operations are allowed, meaning any section of the API is read-only.

⁠Not always needed

You will possibly need to grant access to some of these API sections, which are not so extremely critical but can expose some information that your service does not need.

• $BUILD
• $COMMIT
• $CONFIGS
• $CONTAINERS
• $DISTRIBUTION
• $EXEC
• $IMAGES
• $INFO
• $NETWORKS
• $NODES
• $PLUGINS
• $SERVICES
• $SESSION
• $SWARM
• $SYSTEM
• $TASKS
• $VOLUMES
• $LOG_LEVEL - Logging severity levels. default: info
• $TZ - Timezone. optional

⁠Volume

• /var/run/docker.sock - A path for the UNIX socket of Docker daemon.

⁠Network

• 2375/tcp - Tcp socket listening port.