3 ms·
> Does Traefik autodetect the containers from the Docker socket? Given the overall expertise you've demonstrated here on HN time and again, I'm sure you are aw
by codethief 5y ago
> Does Traefik autodetect the containers from the Docker socket?
Given the overall expertise you've demonstrated here on HN time and again, I'm sure you are aware of this but a general warning to everyone else reading this might be in order: Careful with exposing the Docker socket to Traefik, see https://github.com/traefik/traefik/issues/4174 https://github.com/traefik/traefik/issues/4174
- stavros 5y agoAh, yes, I'm unclear on whether Docker intends to be secure these days (though there are things like Sysbox or running rootless that help), but exposing the socket inside a root container is removing a few layers of defense, thank you for pointing this out. Unfortunately I don't think there's a way for Harbormaster to do anything about it, but I'll play around with Traefik and see if there's a more secure way to deploy it, thank you.