Use docker-socket-proxy for the web UI

[ptr1337]

I just thought that the "docker-socket-proxy" could help out there.

Traefik and so on using also the docker.socket.

Here ill provide you nice example.

https://github.com/ptTrR/traefik2/blob/master/ymlfiles/docker-socket-proxy.yml

[fl0ppy-d1sk]

Hello @ptTrR,

Thanks for your suggestion. We already managed this security issue by creating a dedicated container which is not facing internet and not opening any ports. This change is present in the dev branch and will be available with the next release.

But this "docker-socket-proxy" might be usefull for the upcoming web UI feature. Let's keep this issue open as a reminder.

[ptr1337]

Alright, but thats the most used solution this security problem.
Just was an idea. Looking forward to your new release!

[fl0ppy-d1sk]

Hello @ptr1337,

I've added an example on how to use the docker-socket-proxy with web UI in the security tuning section of the documentation. Thanks for your report.

[ptr1337]

Hey,

sorry for the late answer.
I will test this together with the certbot-cloudflare if possible.

But you improved the last months very much on the documentation and the source itself.

nice work!