No description
  • Shell 49.1%
  • Jinja 29.6%
  • Just 21.3%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Slavi Pantaleev 5d41e12131 Make the base path and support files owned by root
The container runs as root with the container socket mounted, and the env file controls which API calls it lets through.
Whoever owns the base path or the env file could let all of them through.

container_socket_proxy_uid is no longer used and validation now reports it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-30 10:00:44 +02:00
.github Update molecule.yml: safeguard for running multiple scenarios 2026-09-02 11:36:00 -04:00
bin Autotag every role-affecting commit, state-based 2026-08-23 19:22:48 +03:00
defaults Make the base path and support files owned by root 2026-10-30 10:00:44 +02:00
LICENSES Make the project compliant with REUSE 2025-05-18 01:37:19 +09:00
meta Update meta/main.yml 2026-07-27 13:31:13 -04:00
molecule Make the base path and support files owned by root 2026-10-30 10:00:44 +02:00
tasks Make the base path and support files owned by root 2026-10-30 10:00:44 +02:00
templates Add *_process_extra_arguments 2026-09-19 08:28:24 -04:00
vars Make the project compliant with REUSE 2025-05-18 01:37:19 +09:00
.ansible-lint Enable pre-commit, etc. 2025-06-13 02:12:18 +09:00
.gitignore Add Molecule testing framework 2026-07-27 13:35:29 -04:00
.pre-commit-config.yaml Update pre-commit repositories and hooks 2026-10-29 01:56:38 -08:00
.python-version Add Molecule testing framework 2026-07-27 13:35:29 -04:00
.yamllint.yml Enable pre-commit, etc. 2025-06-13 02:12:18 +09:00
justfile Update justfile: git hooks resolve prek through the mise shim 2026-08-25 11:15:16 -04:00
LICENSE Initial commit 2023-03-06 08:27:57 +02:00
mise.toml mise: drop the settings block - yes is ignored in project configs 2026-08-16 09:27:23 +03:00
README.md Update README.md: add a section about releases 2026-10-02 01:32:39 -04:00
REUSE.toml Drop the standalone yamllint CI workflow 2026-08-23 19:22:29 +03:00

Docker Socket Proxy Ansible role

This is an Ansible role which installs Docker Socket Proxy to run as a Docker container wrapped in a systemd service.

This role implicitly depends on the com.devture.ansible.role.systemd_docker_base role.

May be used in combination with the ansible-role-traefik role.

💡 For an Ansible playbook which integrates this role and makes it easier to use, see the Mother-of-All-Self-Hosting Ansible playbook.

Development

pre-commit

You can optionally install a Git pre-commit hook (via mise + prek) that runs formatting and linting checks before each commit. See .pre-commit-config.yaml for which hooks are to be executed.

To install the hook, run the just command below:

just prek-install-git-pre-commit-hook

Molecule

This role supports Molecule, an Ansible testing framework designed for developing and testing Ansible collections, playbooks, and roles.

Refer to this page for details about how to utilize it.

Releases

Tags are created on the GitHub workflow by .github/workflows/autotag.yml, which asks bin/compute-next-tag.sh what the commit on main should be released as. The answer comes from the version pinned in defaults/main.yml and from the tags that already exist, so a commit that only touches documentation or CI is not released at all, and any change to the role itself is — without waiting for a dependency bump to carry it along.

bin/test-compute-next-tag.sh exercises that script against throwaway repositories, and runs as a prek hook.