mirror/matrix-docker-ansible-deploy
1
0
Fork 0
mirror of https://github.com/spantaleev/matrix-docker-ansible-deploy.git synced 2024-12-26 02:48:32 +01:00
Code Issues Packages Projects Releases Wiki Activity
bf2b540807
matrix-docker-ansible-deploy/playbooks
History
Slavi Pantaleev bf2b540807 Harden Traefik security by accessing the Docker API through docker-socket-proxy 
With these changes, we:

- install https://github.com/Tecnativa/docker-socket-proxy via the
  https://github.com/devture/com.devture.ansible.role.container_socket_proxy Ansible role

- make Traefik access the Docker API via TCP by connecting to this
  socket proxy

- .. which allows us to run the Traefik container with less privileges
  (non-`root`, dropped capabilities)
2023-03-06 09:11:02 +02:00
..
jitsi_jvb.yml Provision extra Jitsi JVB services on additional hosts (#2166) 2022-11-18 14:00:27 +02:00
matrix.yml Harden Traefik security by accessing the Docker API through docker-socket-proxy 2023-03-06 09:11:02 +02:00