Compose-Test #1

New Issue

2026-09-01T11:20:23+02:00

groot commented

2026-09-01 11:20:23 +02:00

services:
  dockwatch:
    image: git.send.nrw/sendnrw/dockwatch:latest
    pid: host
    privileged: true
    restart: unless-stopped
    ports: ["18080:8080"]
    environment:
      APP_MODE: standalone
      BASE_URL: "${BASE_URL:-http://localhost:8080}"
      AUTH_DISABLED: "${AUTH_DISABLED:-true}"
      APP_SECRET: "${APP_SECRET:-change-this-development-secret-please-123456}"
      OIDC_ISSUER: "${OIDC_ISSUER:-}"
      OIDC_CLIENT_ID: "${OIDC_CLIENT_ID:-}"
      OIDC_CLIENT_SECRET: "${OIDC_CLIENT_SECRET:-}"
      OIDC_ADMIN_GROUP: "${OIDC_ADMIN_GROUP:-dockwatch-admins}"
      OIDC_OPERATOR_GROUP: "${OIDC_OPERATOR_GROUP:-dockwatch-operators}"
      CHECK_CONCURRENCY: "${CHECK_CONCURRENCY:-8}"
      CHECK_RETENTION_DAYS: "${CHECK_RETENTION_DAYS:-30}"
      HTTP_TIMEOUT_SECONDS: "${HTTP_TIMEOUT_SECONDS:-10}"
      AUDIT_RETENTION_DAYS: "${AUDIT_RETENTION_DAYS:-180}"
      HOST_ROOT: "${HOST_ROOT:-}"
      ALLOW_HOST_USER_MANAGEMENT: "${ALLOW_HOST_USER_MANAGEMENT:-true}"
      ALLOW_HOST_PERMISSION_MANAGEMENT: "${ALLOW_HOST_PERMISSION_MANAGEMENT:-true}"
      HOST_SECURITY_ENABLED: "${HOST_SECURITY_ENABLED:-true}"
      ALLOW_HOST_SECURITY_CHANGES: "${ALLOW_HOST_SECURITY_CHANGES:-true}"
      ALLOW_HOST_PACKAGE_MANAGEMENT: "${ALLOW_HOST_PACKAGE_MANAGEMENT:-true}"
      HOST_SECURITY_HOST_PID: "${HOST_SECURITY_HOST_PID:-1}"
    volumes:
      - ./data:/data
      - /:/host:rw
      - ./stacks:/stacks
      - /var/run/docker.sock:/var/run/docker.sock

``` services: dockwatch: image: git.send.nrw/sendnrw/dockwatch:latest pid: host privileged: true restart: unless-stopped ports: ["18080:8080"] environment: APP_MODE: standalone BASE_URL: "${BASE_URL:-http://localhost:8080}" AUTH_DISABLED: "${AUTH_DISABLED:-true}" APP_SECRET: "${APP_SECRET:-change-this-development-secret-please-123456}" OIDC_ISSUER: "${OIDC_ISSUER:-}" OIDC_CLIENT_ID: "${OIDC_CLIENT_ID:-}" OIDC_CLIENT_SECRET: "${OIDC_CLIENT_SECRET:-}" OIDC_ADMIN_GROUP: "${OIDC_ADMIN_GROUP:-dockwatch-admins}" OIDC_OPERATOR_GROUP: "${OIDC_OPERATOR_GROUP:-dockwatch-operators}" CHECK_CONCURRENCY: "${CHECK_CONCURRENCY:-8}" CHECK_RETENTION_DAYS: "${CHECK_RETENTION_DAYS:-30}" HTTP_TIMEOUT_SECONDS: "${HTTP_TIMEOUT_SECONDS:-10}" AUDIT_RETENTION_DAYS: "${AUDIT_RETENTION_DAYS:-180}" HOST_ROOT: "${HOST_ROOT:-}" ALLOW_HOST_USER_MANAGEMENT: "${ALLOW_HOST_USER_MANAGEMENT:-true}" ALLOW_HOST_PERMISSION_MANAGEMENT: "${ALLOW_HOST_PERMISSION_MANAGEMENT:-true}" HOST_SECURITY_ENABLED: "${HOST_SECURITY_ENABLED:-true}" ALLOW_HOST_SECURITY_CHANGES: "${ALLOW_HOST_SECURITY_CHANGES:-true}" ALLOW_HOST_PACKAGE_MANAGEMENT: "${ALLOW_HOST_PACKAGE_MANAGEMENT:-true}" HOST_SECURITY_HOST_PID: "${HOST_SECURITY_HOST_PID:-1}" volumes: - ./data:/data - /:/host:rw - ./stacks:/stacks - /var/run/docker.sock:/var/run/docker.sock ```

groot commented

2026-09-01 11:21:36 +02:00

APP_MODE=standalone
LISTEN_ADDR=:8080
BASE_URL=http://localhost:8080
DATA_DIR=/data
STACKS_DIR=/stacks
AUTH_DISABLED=true
APP_SECRET=4ca0853b2d19c7f1182f4e59e990614241aba76382fc431ab6889ef3419ad8c7
OIDC_ISSUER=
OIDC_CLIENT_ID=
OIDC_CLIENT_SECRET=
OIDC_ADMIN_GROUP=dockwatch-admins
OIDC_OPERATOR_GROUP=dockwatch-operators
AGENT_TOKEN=
CHECK_CONCURRENCY=8
CHECK_RETENTION_DAYS=30
HTTP_TIMEOUT_SECONDS=10
AUDIT_RETENTION_DAYS=180

# Optional host/container identity inspection. Mount the target host root at this path.
# Keep read-only unless you explicitly enable local host account creation.
HOST_ROOT=/host
ALLOW_HOST_USER_MANAGEMENT=true
ALLOW_HOST_PERMISSION_MANAGEMENT=true

# Host Security layer. Audit is separate from mutation/package privileges.
HOST_SECURITY_ENABLED=true
ALLOW_HOST_SECURITY_CHANGES=true
ALLOW_HOST_PACKAGE_MANAGEMENT=true
HOST_SECURITY_HOST_PID=1

``` APP_MODE=standalone LISTEN_ADDR=:8080 BASE_URL=http://localhost:8080 DATA_DIR=/data STACKS_DIR=/stacks AUTH_DISABLED=true APP_SECRET=4ca0853b2d19c7f1182f4e59e990614241aba76382fc431ab6889ef3419ad8c7 OIDC_ISSUER= OIDC_CLIENT_ID= OIDC_CLIENT_SECRET= OIDC_ADMIN_GROUP=dockwatch-admins OIDC_OPERATOR_GROUP=dockwatch-operators AGENT_TOKEN= CHECK_CONCURRENCY=8 CHECK_RETENTION_DAYS=30 HTTP_TIMEOUT_SECONDS=10 AUDIT_RETENTION_DAYS=180 # Optional host/container identity inspection. Mount the target host root at this path. # Keep read-only unless you explicitly enable local host account creation. HOST_ROOT=/host ALLOW_HOST_USER_MANAGEMENT=true ALLOW_HOST_PERMISSION_MANAGEMENT=true # Host Security layer. Audit is separate from mutation/package privileges. HOST_SECURITY_ENABLED=true ALLOW_HOST_SECURITY_CHANGES=true ALLOW_HOST_PACKAGE_MANAGEMENT=true HOST_SECURITY_HOST_PID=1 ```

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: sendnrw/dockwatch#1