services:
  socket-proxy:
    image: tecnativa/docker-socket-proxy:latest
    container_name: socket-proxy
    restart: unless-stopped
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    environment:
      CONTAINERS: 1   # Traefik needs this
      SERVICES: 0
      TASKS: 0
      NETWORKS: 0
      NODES: 0
      BUILD: 0
      COMMIT: 0
      CONFIGS: 0
      DISTRIBUTION: 0
      EXEC: 0
      IMAGES: 0
      INFO: 0
      PLUGINS: 0
      POST: 0
      SECRETS: 0
      SWARM: 0
      SYSTEM: 0
      VOLUMES: 0
    networks:
      - socket_proxy  # isolated network, NOT traefik_network
networks:
  traefik:
    name: socket_proxy
    driver: bridge