matrix-docker-ansible-deploy

Matrix Docker Ansible eploy

Slavi Pantaleev bf2b540807 Harden Traefik security by accessing the Docker API through docker-socket-proxy With these changes, we: - install https://github.com/Tecnativa/docker-socket-proxy via the https://github.com/devture/com.devture.ansible.role.container_socket_proxy Ansible role - make Traefik access the Docker API via TCP by connecting to this socket proxy - .. which allows us to run the Traefik container with less privileges (non-`root`, dropped capabilities)	3 лет назад
..
jitsi_jvb.yml	Provision extra Jitsi JVB services on additional hosts (#2166)	3 лет назад
matrix.yml	Harden Traefik security by accessing the Docker API through docker-socket-proxy	3 лет назад

Slavi Pantaleev bf2b540807 Harden Traefik security by accessing the Docker API through docker-socket-proxy

With these changes, we:

- install https://github.com/Tecnativa/docker-socket-proxy via the
  https://github.com/devture/com.devture.ansible.role.container_socket_proxy Ansible role

- make Traefik access the Docker API via TCP by connecting to this
  socket proxy

- .. which allows us to run the Traefik container with less privileges
  (non-`root`, dropped capabilities)

3 лет назад

jitsi_jvb.yml

Provision extra Jitsi JVB services on additional hosts (#2166)

3 лет назад

matrix.yml

Harden Traefik security by accessing the Docker API through docker-socket-proxy

3 лет назад