limit docker socket api access to alloy

2026-03-22 12:19:10 +01:00
parent 9771fc620e
commit ce9dba4923
3 changed files with 34 additions and 4 deletions
--- a/monitoring/config.alloy
+++ b/monitoring/config.alloy
@@ -3,7 +3,7 @@
 // ============================================================

 discovery.docker "containers" {
-  host = "unix:///var/run/docker.sock"
+  host = "http://docker-socket-proxy:2375"
 }

 discovery.relabel "containers" {
@@ -21,7 +21,7 @@ discovery.relabel "containers" {
 }

 loki.source.docker "containers" {
-  host       = "unix:///var/run/docker.sock"
+  host       = "http://docker-socket-proxy:2375"
  targets    = discovery.relabel.containers.output
  forward_to = [loki.write.grafana_cloud.receiver]
 }