homepage improvements

docker-compose.yaml

@@ -5,14 +5,16 @@ services:
     restart: unless-stopped
     networks:
       - proxy
+      - socket_proxy
     volumes:
-      - /srv/homelab/volumes/homepage/config:/app/config
-      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - ./config:/app/config
+      # Docker socket is NOT mounted directly anymore
     environment:
       - PUID=1000
       - PGID=1000
       - TZ=America/Sao_Paulo
       - HOMEPAGE_ALLOWED_HOSTS=${DOMAIN}
+      - DOCKER_HOST=tcp://socket-proxy:${SOCKET_PROXY_PORT}
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.homepage.rule=Host(`homepage.${DOMAIN}`)"
@@ -32,6 +34,20 @@ services:
         max-size: "10m"
         max-file: "3"
 
+  socket-proxy:
+    image: tecnativa/docker-socket-proxy
+    container_name: socket-proxy
+    restart: unless-stopped
+    networks:
+      - socket_proxy
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+    environment:
+      - CONTAINERS=1 # Allow listing containers
+      - POST=0 # Disallow POST requests (write access)
+
 networks:
   proxy:
     external: true
+  socket_proxy:
+    internal: true