Commit graph

22 commits

Author SHA1 Message Date
Simon L.
c8f942e834
Merge pull request #6311 from nextcloud/docker-socket-proxy-fix-for-agent
Docker-socket-proxy: Update haproxy.cfg to fix timeouts
2025-04-17 13:39:38 +02:00
Bastian Derigs
3f1c2384b7
Update haproxy.cfg
And since i forgott the 1800 and went with 30, 30, 30 here now the correct values. 

Signed-off-by: Bastian Derigs <155444921+derigs@users.noreply.github.com>
2025-04-17 10:49:38 +02:00
Bastian Derigs
f4b5dbe005
Update haproxy.cfg
Due to some testing its possible to install the agent via occ and the frontend by setting this on 60s. Lower values didn't work in my testing. 

Signed-off-by: Bastian Derigs <155444921+derigs@users.noreply.github.com>
2025-04-17 10:33:04 +02:00
Andrey Borysenko
5b5f49b00b
feat: add image inspect rule
Signed-off-by: Andrey Borysenko <andrey18106x@gmail.com>
2025-04-16 16:58:02 +03:00
Oleksander Piskun
348a08a720 more strict rules for the container creation
Signed-off-by: Oleksander Piskun <oleksandr2088@icloud.com>
2025-03-21 18:45:00 +02:00
Oleksander Piskun
f1e7868368 allowed read/write/exec of files for AppAPI for ExApps containers
Signed-off-by: Oleksander Piskun <oleksandr2088@icloud.com>
2024-11-20 14:24:35 +03:00
Andrey Borysenko
35b098cf02
allow logs endpoint in haproxy.cfg for docker-socket-proxy
Signed-off-by: Andrey Borysenko <andrey18106x@gmail.com>
2024-04-23 09:28:05 +03:00
Simon L
36acb8e4e6 add maxconn value to haproxy
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-10-20 13:40:58 +02:00
Simon L
b1ed9aaf13 fix privileged regex?
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-10-05 12:21:30 +02:00
Andrey Borysenko
1dca919af8
allow _ping docker api to verify service accessible
Signed-off-by: Andrey Borysenko <andrey18106x@gmail.com>
2023-10-05 13:16:37 +03:00
Simon L
900ac1463b fix haproxy config
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-08-31 12:46:19 +02:00
Andrey Borysenko
594b3f10e1
use inverted no_privileged_flag
Signed-off-by: Andrey Borysenko <andrey18106x@gmail.com>
2023-08-31 12:45:19 +03:00
Simon L
f0542158de do not allow to set privileged at all
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-08-31 11:33:49 +02:00
Alexander Piskun
5523dfc6ae small rules adjustments 2023-08-31 12:03:24 +03:00
Simon L
e55faec870 add additinaly allowed rules for haproxy
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-08-30 17:02:49 +02:00
Simon L
f92d36a5f7 of course we need the src
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-08-30 15:23:40 +02:00
Simon L
b4e30bc66a add recommended regex
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-08-30 15:16:35 +02:00
Simon L
a56fbb6045 address review
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-08-30 15:13:08 +02:00
Simon L
cac797114a restore lost changes
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-08-30 14:59:08 +02:00
Simon L
2661e85aa3 fix further detail
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-08-24 16:40:46 +02:00
Simon L
c4fb5a0961 improve some deails with docker-socket-proxy
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-08-24 16:25:04 +02:00
Simon L
6685791427 add docker-socket-proxy as option
Signed-off-by: Simon L <szaimen@e.mail.de>
2023-08-24 15:22:49 +02:00