iamthefij/docker-socket-proxy
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

ADD logic for a unix-socket frontend

Browse Source
This commit is contained in:
Cell 2018-02-17 18:23:19 +01:00
parent 75c582ca11
commit 536813c689
2 changed files with 16 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
Dockerfile
View File

@ -2,6 +2,7 @@ FROM haproxy:1.7-alpine
LABEL maintainer="Tecnativa <info@tecnativa.com>" LABEL maintainer="Tecnativa <info@tecnativa.com>"
EXPOSE 2375 EXPOSE 2375
VOLUME /run/docker-filtered
ENV AUTH=0 \ ENV AUTH=0 \
BUILD=0 \ BUILD=0 \
COMMIT=0 \ COMMIT=0 \
@ -21,9 +22,10 @@ ENV AUTH=0 \
SYSTEM=0 \ SYSTEM=0 \
TASKS=0 \ TASKS=0 \
VERSION=1 \ VERSION=1 \
VOLUMES=0 VOLUMES=0 \
SOCK_NETWORK=1 \
SOCK_DISK=1
COPY haproxy.cfg /usr/local/etc/haproxy/haproxy.cfg COPY haproxy.cfg /usr/local/etc/haproxy/haproxy.cfg
VOLUME /run/docker-filtered
# Metadata # Metadata
ARG VCS_REF ARG VCS_REF

16
haproxy.cfg
View File

@ -28,10 +28,6 @@ defaults
load-server-state-from-file global load-server-state-from-file global
backend dockerbackend backend dockerbackend
server dockersocket /var/run/docker.sock
frontend dockerfrontend
bind :2375,/run/docker-filtered/docker.sock
http-request deny unless METH_GET || { env(POST) -m bool } http-request deny unless METH_GET || { env(POST) -m bool }
http-request deny if { path,url_dec -m reg -i ^(/v[\d\.]+)?/auth } ! { env(AUTH) -m bool } http-request deny if { path,url_dec -m reg -i ^(/v[\d\.]+)?/auth } ! { env(AUTH) -m bool }
http-request deny if { path,url_dec -m reg -i ^(/v[\d\.]+)?/build } ! { env(BUILD) -m bool } http-request deny if { path,url_dec -m reg -i ^(/v[\d\.]+)?/build } ! { env(BUILD) -m bool }
@ -53,4 +49,16 @@ frontend dockerfrontend
http-request deny if { path,url_dec -m reg -i ^(/v[\d\.]+)?/tasks } ! { env(TASKS) -m bool } http-request deny if { path,url_dec -m reg -i ^(/v[\d\.]+)?/tasks } ! { env(TASKS) -m bool }
http-request deny if { path,url_dec -m reg -i ^(/v[\d\.]+)?/version } ! { env(VERSION) -m bool } http-request deny if { path,url_dec -m reg -i ^(/v[\d\.]+)?/version } ! { env(VERSION) -m bool }
http-request deny if { path,url_dec -m reg -i ^(/v[\d\.]+)?/volumes } ! { env(VOLUMES) -m bool } http-request deny if { path,url_dec -m reg -i ^(/v[\d\.]+)?/volumes } ! { env(VOLUMES) -m bool }
server dockersocket /var/run/docker.sock
frontend docker-network
bind :2375
http-request deny if ! { env(SOCK_NETWORK) -m bool }
default_backend dockerbackend default_backend dockerbackend
frontend docker-disk
bind /run/docker-filtered/docker.sock
http-request deny if ! { env(SOCK_DISK) -m bool }
default_backend dockerbackend