I've become increasing concerned with my recent approach of following guides that have docker.sock mounted as a volume for some exposed containers. I've found a couple of "separate container" approaches for nginx that seem to work well with straightforward guides and I wanted to see if anyone might…

Is there something like jwilder "separate container" nginx setup to prevent need to mount or expose docker.sock?

trajano September 19, 2019, 12:13pm 2

I have my Docker daemon exposed in a separate container using socat which I run on the manager node. This allows me to run traefik in the worker nodes. LetsEncrypt JSON file is not being stored

Topic		Replies	Views
Static traefik config for use as docker reverse proxy (avoiding exposure of docker socket) Traefik v2 (latest) docker , docker-swarm , file	5	3876	November 22, 2019
Isolating traffic between containers proxied by traefik Traefik v2 (latest) docker	2	1432	October 23, 2019
Traefik 2.0 Docker Swarm Traefik v2 (latest) docker-swarm	6	1884	November 4, 2019
Help wanted: HTTPS redirection with custom ports Traefik v2 (latest) docker , middleware	3	3946	February 1, 2021
Design questions: What do you think about using Traefik in DMZ "in front" of another Traefik in a more secure zone Traefik v1 docker	2	1259	September 19, 2019

Is there something like jwilder "separate container" nginx setup to prevent need to mount or expose docker.sock?

Related Topics