services:
  dockdeck:
    depends_on:
      dockerproxy:
        condition: service_started
    environment:
      APPOPS_URL: ""
      DOCKER_PROXY_URL: http://dockerproxy:2375
    networks:
      - dockdeck_internal

  dockerproxy:
    image: ghcr.io/tecnativa/docker-socket-proxy:latest
    restart: unless-stopped
    environment:
      LOG_LEVEL: warning
      CONTAINERS: 1
      INFO: 1
      PING: 1
      VERSION: 1
      POST: 0
      AUTH: 0
      BUILD: 0
      COMMIT: 0
      CONFIGS: 0
      DISTRIBUTION: 0
      EVENTS: 0
      EXEC: 0
      IMAGES: 0
      NETWORKS: 0
      NODES: 0
      PLUGINS: 0
      SECRETS: 0
      SERVICES: 0
      SESSION: 0
      SWARM: 0
      SYSTEM: 0
      TASKS: 0
      VOLUMES: 0
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    networks:
      - dockdeck_internal
    read_only: true
    tmpfs:
      - /run
      - /tmp
    security_opt:
      - no-new-privileges:true

networks:
  dockdeck_internal:
    internal: true
    ipam:
      config:
        - subnet: ${DOCKDECK_INTERNAL_SUBNET:-172.31.240.0/28}