Skip to content

Commit 8d7babe

Browse files
committed
recommend our docker socket proxy
1 parent 67fc36c commit 8d7babe

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

README.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,12 +22,12 @@ This mod gives SWAG the ability to auto-detect running containers via labels and
2222
In SWAG docker arguments, set an environment variable `DOCKER_MODS=linuxserver/mods:universal-docker|linuxserver/mods:swag-auto-proxy` and either add a volume mapping for `/var/run/docker.sock:/var/run/docker.sock:ro`, or set an environment var `DOCKER_HOST=remoteaddress`.
2323

2424
## Security Consideration:
25-
Mapping the `docker.sock`, especially in a publicly accessible container is a security liability. Since this mod only needs read-only access to the docker api, the recommended method is to proxy the `docker.sock` via a solution like [tecnativa/docker-socket-proxy](https://hub.docker.com/r/tecnativa/docker-socket-proxy), limit the access, and set `DOCKER_HOST=` to point to the proxy address.
25+
Mapping the `docker.sock`, especially in a publicly accessible container is a security liability. Since this mod only needs read-only access to the docker api, the recommended method is to proxy the `docker.sock` via a solution like [our docker socket proxy](https://github.com/linuxserver/docker-socket-proxy), limit the access, and set `DOCKER_HOST=` to point to the proxy address.
2626

2727
Here's a sample compose yaml snippet for tecnativa/docker-socket-proxy:
2828
```yaml
2929
dockerproxy:
30-
image: ghcr.io/tecnativa/docker-socket-proxy:latest
30+
image: lscr.io/linuxserver/socket-proxy:latest
3131
container_name: dockerproxy
3232
volumes:
3333
- /var/run/docker.sock:/var/run/docker.sock:ro

0 commit comments

Comments
 (0)