boxout/docker-compose.yml at main · codesmax/boxout · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
services:
  socket-proxy:
    image: tecnativa/docker-socket-proxy:latest
    container_name: boxout-socket-proxy
    restart: unless-stopped
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    environment:
      # Containers: allow most operations, deny delete
      CONTAINERS: 1
      CONTAINERS_DELETE: 0

      # Images: allow pull/build/inspect, deny delete
      IMAGES: 1
      IMAGES_DELETE: 0

      # Networks: allow read + connect/disconnect, deny delete
      NETWORKS: 1
      NETWORKS_DELETE: 0

      # Volumes: allow read + create (needed for compose), deny delete
      VOLUMES: 1
      VOLUMES_DELETE: 0

      # Compose/exec/logs/build — all needed for normal dev workflow
      EXEC: 1
      BUILD: 1
      EVENTS: 1
      INFO: 1
      PING: 1
      VERSION: 1
      POST: 1

      # Dangerous — always off
      AUTH: 0
      SECRETS: 0
      SWARM: 0
      NODES: 0
      SERVICES: 0
      TASKS: 0
      CONFIGS: 0
      PLUGINS: 0
      SYSTEM: 0
      DISTRIBUTION: 0

    networks:
      - boxout-proxy-net

networks:
  boxout-proxy-net:
    name: boxout-proxy-net
    driver: bridge

volumes:
  boxout-home:
    name: boxout-home