# Docker-Socket-Proxy

Docker-Socket-Proxy is a self-hosted home automation app. The Socket Proxy is a security-enhanced proxy which allows you to apply access rules to the Docker socket, limiting the attack surface for containers such as watchtower or Traefik that need to use it. It is open source and self-hosted, installable on ZimaOS, Docker Hub and Unraid.

Canonical page: https://ourlocalhost.com/app/830/docker-socket-proxy

## Description

The Socket Proxy is a security-enhanced proxy which allows you to apply access rules to the Docker socket, limiting the attack surface for containers such as watchtower or Traefik that need to use it.

## Platform availability

Available on 2 of 9 platforms: Unraid, ZimaOS.

## Health score

15/100 (Low), based on 2 of 4 factors.
- Maintained: 0 (GitHub repository no longer exists)
- Easy to install: 45 (2 install platforms, install notes, Docker image)

## Links

- GitHub: https://github.com/Tecnativa/docker-socket-proxy
- ZimaOS: https://github.com/bigbeartechworld/big-bear-casaos/tree/master/Apps/socket-proxy
- Docker Hub: https://hub.docker.com/r/linuxserver/socket-proxy
- Official website: https://docs.linuxserver.io/images/docker-socket-proxy
- Unraid: https://ca.unraid.net/apps/docker-socket-proxy-13c5g7k0bposn8?q=Docker-Socket-Proxy

## Common questions

### Why use Docker Socket Proxy with Traefik instead of mounting the Docker socket directly?

The socket proxy can limit Traefik's access to the socket to only what is necessary. This reduces the potential damage an attacker can cause.

### What setup concern is mentioned when using Docker Socket Proxy through a Portainer stack?

A Portainer thread seeks advice on implementing the proxy through a Portainer stack. It also mentions changing the proxy configuration as a concern.

### Why might Home Assistant’s Docker integration show no containers when using Docker Socket Proxy?

A Home Assistant community thread reports that the Docker integration can show no containers when pointed at Docker Socket Proxy. This can happen even though the proxy reports Docker status entities.

---
Source: Our Local Host (https://ourlocalhost.com/app/830/docker-socket-proxy), the self-hosted and open-source app directory.