05c2045f06
- Move docker-compose files to .docker/compose/ - Move docker-entrypoint.sh to .docker/ - Move DOCKER.md to .docker/README.md - Move 16 implementation docs to docs/implementation/ - Delete test artifacts (block_test.txt, caddy_*.json) - Update all references in Dockerfile, Makefile, tasks, scripts - Add .github/instructions/structure.instructions.md for enforcement - Update CHANGELOG.md Root level reduced from 81 items to ~35 visible items.
20 lines
786 B
YAML
20 lines
786 B
YAML
version: '3.9'
|
|
|
|
services:
|
|
# Run this service on your REMOTE servers (not the one running Charon)
|
|
# to allow Charon to discover containers running there (legacy: CPMP).
|
|
docker-socket-proxy:
|
|
image: alpine/socat
|
|
container_name: docker-socket-proxy
|
|
restart: unless-stopped
|
|
ports:
|
|
# Expose port 2375.
|
|
# ⚠️ SECURITY WARNING: Ensure this port is NOT accessible from the public internet!
|
|
# Use a VPN (Tailscale, WireGuard) or a private local network (LAN).
|
|
- "2375:2375"
|
|
volumes:
|
|
# Give the proxy access to the host's Docker socket
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
# Forward TCP traffic from port 2375 to the internal Docker socket
|
|
command: tcp-listen:2375,fork,reuseaddr unix-connect:/var/run/docker.sock
|