Forked from kalaksi/docker-tinyproxy
Source:
Images:
docker.io/rloomans/tinyproxy)ghcr.io/rloomans/tinyproxy)Simply put, this container has been written with simplicity and security in mind.
Many community containers run unnecessarily with root privileges by default and don't provide help for dropping unneeded CAPabilities either. On top of that, overly complex shell scripts, monolithic designs and unofficial base images make it harder to verify the source among other issues.
To remedy the situation, these images have been written with security, simplicity and overall quality in mind.
| Requirement | Status | Details |
|---|---|---|
| Don't run as root | ✅ | Never run as root unless necessary. |
| Transparent build process | ✅ | For verifying that the container matches the code. See GitLab CI. |
| Official base image | ✅ | |
| Drop extra CAPabilities | ✅ | See docker-compose.yml |
| No default passwords | ✅ | No static default passwords. That would make the container insecure by default. |
| Support secrets-files | ✅ | Support providing e.g. passwords via files instead of environment variables. |
| Handle signals properly | ✅ | |
| Simple Dockerfile | ✅ | No overextending the container's responsibilities. And keep everything in the Dockerfile if reasonable. |
| Versioned tags | ✅ | Offer versioned tags for stability. |
See the Tags tab on Docker Hub for specifics. Basically you have:
latest tag that always has the latest changes (Alpine-based, built from Dockerfile).YYYY.MM.DD-<run number>) and a sha-<commit> tag.debian- (e.g. debian-latest, debian-2026.10.25-42) for the Debian-based image built from Dockerfile.debian.Images are published to both Docker Hub (rloomans/tinyproxy) and GitHub Container Registry (ghcr.io/rloomans/tinyproxy).
See Dockerfile and docker-compose.yml (https://github.com/rloomans/docker-tinyproxy) for usable environment variables. Variables that are left empty will use default values.
If you need more customization, mount your own tinyproxy.conf to /etc/tinyproxy/tinyproxy.conf,
otherwise, the default tinyproxy configuration file will be used and customized according to the environment variables.
Set AUTH_USER and provide the password as a Docker secret (or any mounted file) at AUTH_PASSWORD_FILE, which defaults to /run/secrets/auth_password. See the commented secrets examples in docker-compose.yml.
AUTH_PASSWORD is also supported, but environment variables are visible via docker inspect and in the process environment, so use it only for quick tests.
Note that the password is written in plain text to the generated /etc/tinyproxy/tinyproxy.conf inside the container, as tinyproxy cannot read it from a file.
See the repository on https://github.com/rloomans/docker-tinyproxy.
Copyright (c) 2018 [email protected] and Copyright (c) 2026 [email protected]. See LICENSE for license information.
As with all Docker images, the built image likely also contains other software which may be under other licenses (such as software from the base distribution, along with any direct or indirect dependencies of the primary software being contained).
As for any pre-built image usage, it is the image user's responsibility to ensure that any use of this image complies with any relevant licenses for all software contained within.
Content type
Image
Digest
sha256:14d78c6a5…
Size
6.3 MB
Last updated
3 days ago
docker pull rloomans/tinyproxy