Skip to content

Commit 4da2ba1

Browse files
committed
Fix documentation
1 parent 5ef2945 commit 4da2ba1

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

README.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ This mod gives SWAG the ability to start containers on-demand when accessed thro
5050
## Security Consideration:
5151
Mapping the `docker.sock`, especially in a publicly accessible container is a security liability. Since this mod only needs read-only access to the docker api, the recommended method is to proxy the `docker.sock` via a solution like [our docker socket proxy](https://github.com/linuxserver/docker-socket-proxy), limit the access, and set `DOCKER_HOST=` to point to the proxy address.
5252

53-
Here's a sample compose yaml snippet for linuxserver/docker-socket-proxy:
53+
Here's a sample compose yaml snippet for `linuxserver/docker-socket-proxy`:
5454
```yaml
5555
socket-proxy:
5656
image: lscr.io/linuxserver/socket-proxy:latest
@@ -59,12 +59,12 @@ Here's a sample compose yaml snippet for linuxserver/docker-socket-proxy:
5959
- ALLOW_START=1
6060
- ALLOW_STOP=1
6161
- CONTAINERS=1
62-
- POST=1
62+
- POST=0
6363
volumes:
6464
- /var/run/docker.sock:/var/run/docker.sock:ro
6565
restart: unless-stopped
6666
read_only: true
6767
tmpfs:
6868
- /run
6969
```
70-
Then the env var in SWAG can be set as `DOCKER_HOST=socket-proxy`. This will allow docker cli in SWAG to be able to retrieve info on other containers, but it won't be allowed to spin up new containers.
70+
Then the env var in SWAG can be set as `DOCKER_HOST=tcp://socket-proxy:2375`. This will allow docker cli in SWAG to be able to retrieve info on other containers, but it won't be allowed to spin up new containers.

0 commit comments

Comments
 (0)