This is an old revision of the document!

Systems - Media Server - Set Up the Mediaserver Docker Compose File

Edit the docker-compose-mediaserver.yml and populate with…

Define Default Network

/home/peter/docker/docker-compose-mediaserver.yml

networks:
  default:
    driver: bridge

NOTE: This defines one network called default.

driver: bridge - The default bridge network is created automatically when Docker is installed.
- It provides basic networking capabilities for containers running on the same host.
- Containers connected to the bridge network can communicate with each other using their IP addresses or container names.

Add Docker Media Server Containers

/home/peter/docker/docker-compose-mediaserver.yml

networks:
  default:
    driver: bridge
 
include:

NOTE: Each app or service will be defined into its own yaml file.

These individual services will be added into that include block in the main Docker Compose file.

—-

Create Socket Proxy Docker Compose

Create a file called socket-proxy.yml inside /home/peter/docker/compose/mediaserver

/home/peter/docker/compose/mediaserver

services:
  socket-proxy:
    image: lscr.io/linuxserver/socket-proxy:latest
    container_name: socket-proxy
    environment:
      - ALLOW_START=0 #optional
      - ALLOW_STOP=0 #optional
      - ALLOW_RESTARTS=0 #optional
      - AUTH=0 #optional
      - BUILD=0 #optional
      - COMMIT=0 #optional
      - CONFIGS=0 #optional
      - CONTAINERS=0 #optional
      - DISABLE_IPV6=0 #optional
      - DISTRIBUTION=0 #optional
      - EVENTS=1 #optional
      - EXEC=0 #optional
      - IMAGES=0 #optional
      - INFO=0 #optional
      - LOG_LEVEL=info #optional
      - NETWORKS=0 #optional
      - NODES=0 #optional
      - PING=1 #optional
      - PLUGINS=0 #optional
      - POST=0 #optional
      - SECRETS=0 #optional
      - SERVICES=0 #optional
      - SESSION=0 #optional
      - SWARM=0 #optional
      - SYSTEM=0 #optional
      - TASKS=0 #optional
      - VERSION=1 #optional
      - VOLUMES=0 #optional
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    restart: unless-stopped
    read_only: true
    tmpfs:
      - /run

ALERT: When running Docker in production, you typically do not want to expose the Docker daemon socket to external networks.

This poses a challenge for tools and apps that need access to the Docker API.
One solution is to set up a proxy that controls and secures access to the Docker API.

The docker-socket-proxy will need to run as the root user to be able to proxy the docker socket to the services.

References

https://docs.linuxserver.io/images/docker-socket-proxy/

Wiki

Table of Contents

Systems - Media Server - Set Up the Mediaserver Docker Compose File

Define Default Network

Add Docker Media Server Containers

Create Socket Proxy Docker Compose

References