2017-07-24 22:38:08 +02:00
|
|
|
{
|
2022-05-10 18:21:59 +02:00
|
|
|
"debug": false,
|
|
|
|
|
|
|
|
{# Docker data-dir (default to /var/lib/docker) #}
|
|
|
|
"data-root": "{{ docker_home }}",
|
|
|
|
|
|
|
|
{# Keep containers running while docker daemon downtime #}
|
2022-05-24 16:22:49 +02:00
|
|
|
"live-restore": {{ docker_conf_live_restore | to_json }},,
|
2022-05-10 18:21:59 +02:00
|
|
|
|
|
|
|
{# Turn on user namespace remaping #}
|
|
|
|
"userns-remap": "default",
|
|
|
|
|
2022-05-10 19:04:58 +02:00
|
|
|
{% if docker_conf_use_iptables %}
|
|
|
|
{# Use iptables instead of docker-proxy #}
|
|
|
|
"userland-proxy": false,
|
|
|
|
"iptables": true,
|
|
|
|
{% endif %}
|
|
|
|
|
|
|
|
{# Disable the possibility for containers processes to gain new privileges #}
|
|
|
|
"no-new-privileges": {{ docker_conf_no_newprivileges | to_json }},
|
|
|
|
|
|
|
|
{% if docker_conf_disable_default_networking %}
|
|
|
|
{# Disable all default network connectivity #}
|
|
|
|
"bridge": "none",
|
|
|
|
"icc": false,
|
|
|
|
{% endif %}
|
|
|
|
|
2017-07-24 22:38:08 +02:00
|
|
|
{% if docker_tls_enabled %}
|
|
|
|
"tls": true,
|
|
|
|
"tlscert": "{{ docker_tls_path }}/{{ docker_tls_cert }}",
|
|
|
|
"tlscacert": "{{ docker_tls_path }}/{{ docker_tls_ca }}",
|
2022-05-10 18:21:59 +02:00
|
|
|
"tlskey": "{{ docker_tls_path }}/{{ docker_tls_key }}",
|
2017-07-24 22:38:08 +02:00
|
|
|
{% endif %}
|
2022-05-10 18:21:59 +02:00
|
|
|
|
2017-07-24 22:38:08 +02:00
|
|
|
{% if docker_remote_access_enabled %}
|
|
|
|
"hosts": ["tcp://{{ docker_daemon_listening_ip }}:{{ docker_daemon_port }}", "fd://"]
|
|
|
|
{% else %}
|
|
|
|
"hosts": ["fd://"]
|
|
|
|
{% endif %}
|
|
|
|
}
|