2.0 KiB
2.0 KiB
Docker Socket Readonly Proxy
What?
This is a readonly proxy for the Docker Socket.
Why?
Giving access to your Docker socket could mean giving root access to your host, or even to your whole swarm, but some services require hooking into that socket to react to events, etc. Using this proxy lets you block anything you consider those services should not do.
How?
We use the official Alpine-based HAProxy image with a small configuration file.
It blocks access to the Docker socket API according to the environment
variables you set. It returns a HTTP 403 Forbidden status for those dangerous
requests that should never happen.
Usage
Feedback
Please send any feedback (issues, questions) to the issue tracker.