Comment on After 1.5 years of learning selfhosting, this is where I'm at
dataprolet@lemmy.dbzer0.com 5 months agoThanks, but I meant the HAProxy in your homelab.
Comment on After 1.5 years of learning selfhosting, this is where I'm at
dataprolet@lemmy.dbzer0.com 5 months agoThanks, but I meant the HAProxy in your homelab.
7Sea_Sailor@lemmy.dbzer0.com 5 months ago
Oh, that! That app proxies the docker socket connections over a TCP channel. Which provides a more granular control over what app gets what access to specific functionalities of the docker socket. Directly mounting the socket into an app technically grants full root access to the host system in case of a breach, so this is the advised way to do it.