Zurück zu Anwendungen Eine App einreichenEinreichen

Docker-Socket-Proxy

Docker-Anwendung from grtgbln's Repository

Übersicht

The Socket Proxy is a security-enhanced proxy which allows you to apply access rules to the Docker socket, limiting the attack surface for containers such as watchtower or Traefik that need to use it.

Laufzeit-Argumente

Netzwerk: bridge
Privilegiert: true
Extra Params: --read-only --tmpfs /run

Konfiguration der Vorlage

Allow POSTVariable

When set to 0, only GET and HEAD operations are allowed, making API access read-only.

Ziel: POST
Standard: 0|1

Allow Container StartsVariable

Allow starting containers.

Ziel: ALLOW_START
Standard: 0|1

Allow Container StopsVariable

Allow stopping containers.

Ziel: ALLOW_STOP
Standard: 0|1

Allow Container RestartsVariable

Allow restarting containers.

Ziel: ALLOW_RESTARTS
Standard: 0|1

Allow Auth EndpointVariable

Allow access to the auth endpoint.

Ziel: AUTH
Standard: 0|1

Allow Build EndpointVariable

Allow access to the build endpoint.

Ziel: BUILD
Standard: 0|1

Allow Commit EndpointVariable

Allow access to the commit endpoint.

Ziel: COMMIT
Standard: 0|1

Allow Configs EndpointVariable

Allow access to the configs endpoint.

Ziel: CONFIGS
Standard: 0|1

Allow Containers EndpointVariable

Allow access to the containers endpoint.

Ziel: CONTAINERS
Standard: 0|1

Allow Distribution EndpointVariable

Allow access to the distribution endpoint.

Ziel: DISTRIBUTION
Standard: 0|1

Disable IPv6Variable

Set to 1 to prevent binding to the IPv6 interface for legacy systems that cannot support IPv6.

Ziel: DISABLE_IPV6
Standard: 0|1

Allow Events EndpointVariable

Allow access to the events endpoint.

Ziel: EVENTS
Standard: 1|0

Allow Exec EndpointVariable

Allow access to the exec endpoint.

Ziel: EXEC
Standard: 0|1

Allow Images EndpointVariable

Allow access to the images endpoint.

Ziel: IMAGES
Standard: 0|1

Allow Info EndpointVariable

Allow access to the info endpoint.

Ziel: INFO
Standard: 0|1

Allow Networks EndpointVariable

Allow access to the networks endpoint.

Ziel: NETWORKS
Standard: 0|1

Allow Nodes EndpointVariable

Allow access to the nodes endpoint.

Ziel: NODES
Standard: 0|1

Allow Ping EndpointVariable

Allow access to the ping endpoint.

Ziel: PING
Standard: 1|0

Allow Plugins EndpointVariable

Allow access to the plugins endpoint.

Ziel: PLUGINS
Standard: 0|1

Allow Secrets EndpointVariable

Allow access to the secrets endpoint.

Ziel: SECRETS
Standard: 0|1

Allow Services EndpointVariable

Allow access to the services endpoint.

Ziel: SERVICES
Standard: 0|1

Allow Session EndpointVariable

Allow access to the session endpoint.

Ziel: SESSION
Standard: 0|1

Allow Swarm EndpointVariable

Allow access to the swarm endpoint.

Ziel: SWARM
Standard: 0|1

Allow System EndpointVariable

Allow access to the system endpoint.

Ziel: SYSTEM
Standard: 0|1

Allow Tasks EndpointVariable

Allow access to the tasks endpoint.

Ziel: TASKS
Standard: 0|1

Allow Version EndpointVariable

Allow access to the version endpoint.

Ziel: VERSION
Standard: 1|0

Allow Volumes EndpointVariable

Allow access to the volumes endpoint.

Ziel: VOLUMES
Standard: 0|1

Docker socketPathrw

Path to the Docker socket

Ziel: /var/run/docker.sock
Standard: /var/run/docker.sock
Wert: /var/run/docker.sock

Log LevelVariable

Set the log level for the proxy.

Ziel: LOG_LEVEL
Standard: info|debug|notice|warning|err|crit|alert|emerg

Links

Vorlage Unterstützung Docker-Hub Project

Einzelheiten

Repository

lscr.io/linuxserver/socket-proxy:latest

Registry

https://registry.hub.docker.com/r/lscr.io/linuxserver/socket-proxy

Zuletzt aktualisiert2026-05-01

Erstmals gesehen2025-06-07

Führen Sie Docker-Socket-Proxy auf Unraid aus.

Docker-Socket-Proxy ist gelistet in Community Apps für Unraid OS. Erkunden Sie Unraid, um einen flexiblen Heimserver, ein NAS oder ein Heimlabor aufzubauen.

Erkunden Sie Unraid OS