How do I use the docker.sock exposed by socket-proxy container?

[UtkarshVerma]

I am trying to set up dozzle with socket-proxy but it is not working out. Here is my compose.yaml:

include:
  - ../traefik/compose.yaml

services:
  dozzle:
    container_name: dozzle
    image: docker.io/amir20/dozzle:v8.14.12
    depends_on:
      dozzle-socket-proxy:
        condition: service_healthy

    user: $PUID:$PGID
    group_add:
      - $DOCKER_GID
    read_only: true
    security_opt:
      - no-new-privileges
    cap_drop:
      - ALL

    networks:
      - traefik

    expose:
      - &port 8080

    environment:
      DOZZLE_REMOTE_HOST: /socket-proxy/docker.sock

    labels:
      traefik.enable: true
      traefik.http.routers.dozzle.rule: Host(`dozzle.$DOMAIN`)
      traefik.http.services.dozzle.loadbalancer.server.port: *port 

    volumes:
      - $DOCKER_SOCKET:/socket-proxy:ro
      # - $DOCKER_SOCKET:/var/run/docker.sock:ro

    restart: unless-stopped

  dozzle-socket-proxy:
    container_name: dozzle-socket-proxy
    image: ghcr.io/wollomatic/socket-proxy:$SOCKET_PROXY_VERSION
    command:
      - -allowhealthcheck
      - -allowGET=/v1\..{1,2}/(version|info|containers/.*|events.*)|/_ping
      - -allowHEAD=/_ping
      - -watchdoginterval=3600  # Check once per hour for socket availability.
      - -stoponwatchdog  # Halt program on error and let compose restart it.
      - -shutdowngracetime=5  # Wait 5 seconds before shutting down.
      - -proxysocketendpoint=/state/docker.sock  # Use a file instead of TCP to make this accessible in host networking mode.
      - -proxysocketendpointfilemode=0660  # Allow group members to read and write too.
    healthcheck:
      test: [CMD, ./healthcheck]
      interval: 10s
      timeout: 5s
      retries: 2

    user: $PUID:$PGID
    group_add:
      - $DOCKER_GID
    read_only: true
    security_opt:
      - no-new-privileges
    cap_drop:
      - ALL

    network_mode: none

    volumes:
      - $DOCKER_SOCKET:/var/run/docker.sock:ro
      - ./state:/state:rw

    restart: unless-stopped

When I run it, I get the following:

dozzle  | {"level":"info","version":"v8.14.12","time":"2026-01-02T08:11:26Z","message":"Dozzle version v8.14.12"}
dozzle  | {"level":"info","version":"v8.14.12","time":"2026-01-02T08:11:26Z","message":"Consider using Dozzle's remote agent to manage remote hosts. See https://dozzle.de
v/guide/agent for more information"}
dozzle  | {"level":"info","version":"v8.14.12","host":{"name":"","id":"socket-proxydocker.sock","nCPU":0,"memTotal":0,"endpoint":"/socket-proxy/docker.sock","dockerVersio
n":"","type":"","available":false},"time":"2026-01-02T08:11:26Z","message":"Adding remote host"}
dozzle  | {"level":"warn","version":"v8.14.12","error":"invalid scheme: ","host":{"name":"","id":"socket-proxydocker.sock","nCPU":0,"memTotal":0,"endpoint":"/socket-proxy
/docker.sock","dockerVersion":"","type":"","available":false},"time":"2026-01-02T08:11:26Z","message":"Could not create remote client"}
dozzle  | {"level":"fatal","version":"v8.14.12","time":"2026-01-02T08:11:26Z","message":"Could not connect to any Docker Engine"}
dozzle exited with code 1 (restarting)

Is my DOCKER_REMOTE_HOST value not correct?

[UtkarshVerma]

I'd also be fine if specifying DOCKER_HOST was supported to use any path other than /var/run/docker.sock. But the container doesn't seem to respect it.

[amir20]

This is pretty well documented at https://dozzle.dev/guide/remote-hosts. DOZZLE_REMOTE_HOST: /socket-proxy/docker.sock is not valid. It's even documented at https://github.com/wollomatic/socket-proxy/wiki 😄

[UtkarshVerma]

I did see the docs and all of them were using tcp:// but I just wanted to make sure. I guess this is out of scope for the project. I would have preferred to do it the way they do it with traefik but this is also fine. Thanks for your time.

[SolitudePy]

also you need to map the volume correctly e.g - /var/run/docker.sock:/var/run/docker.sock & put them in a network