- Shell 49.1%
- Jinja 29.6%
- Just 21.3%
| Filename | Latest commit message | Latest commit date |
|---|---|---|
The container runs as root with the container socket mounted, and the env file controls which API calls it lets through. Whoever owns the base path or the env file could let all of them through. container_socket_proxy_uid is no longer used and validation now reports it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> |
||
| .github | ||
| bin | ||
| defaults | ||
| LICENSES | ||
| meta | ||
| molecule | ||
| tasks | ||
| templates | ||
| vars | ||
| .ansible-lint | ||
| .gitignore | ||
| .pre-commit-config.yaml | ||
| .python-version | ||
| .yamllint.yml | ||
| justfile | ||
| LICENSE | ||
| mise.toml | ||
| README.md | ||
| REUSE.toml | ||
Docker Socket Proxy Ansible role
This is an Ansible role which installs Docker Socket Proxy to run as a Docker container wrapped in a systemd service.
This role implicitly depends on the com.devture.ansible.role.systemd_docker_base role.
May be used in combination with the ansible-role-traefik role.
💡 For an Ansible playbook which integrates this role and makes it easier to use, see the Mother-of-All-Self-Hosting Ansible playbook.
Development
pre-commit
You can optionally install a Git pre-commit hook (via mise + prek) that runs formatting and linting checks before each commit. See .pre-commit-config.yaml for which hooks are to be executed.
To install the hook, run the just command below:
just prek-install-git-pre-commit-hook
Molecule
This role supports Molecule, an Ansible testing framework designed for developing and testing Ansible collections, playbooks, and roles.
Refer to this page for details about how to utilize it.
Releases
Tags are created on the GitHub workflow by .github/workflows/autotag.yml, which asks bin/compute-next-tag.sh what the commit on main should be released as. The answer comes from the version pinned in defaults/main.yml and from the tags that already exist, so a commit that only touches documentation or CI is not released at all, and any change to the role itself is — without waiting for a dependency bump to carry it along.
bin/test-compute-next-tag.sh exercises that script against throwaway repositories, and runs as a prek hook.