traefik/docker-compose.yml

@@ -1,8 +1,25 @@
 services:
+  traefik_socket_proxy:
+    container_name: traefik_socket_proxy
+    image: ghcr.io/11notes/socket-proxy:2.1.3
+    restart: unless-stopped
+    read_only: true
+    user: ${PUID}:${PGID}
+    environment:
+      TZ: ${TZ}
+    volumes:
+      - /run/docker.sock:/run/docker.sock:ro
+      - socket-proxy:/run/proxy
+    networks:
+      - frontend
+
   traefik:
     container_name: traefik
     image: docker.io/library/traefik:v3.5.0
     restart: unless-stopped
+    depends_on:
+      traefik_socket_proxy:
+        condition: service_healthy
     security_opt:
       - no-new-privileges:true
     secrets:
@@ -14,7 +31,7 @@ services:
       - ${APPDATA_PATH}/traefik/data/acme.json:/acme.json
       - ${APPDATA_PATH}/traefik/logs:/var/log/traefik
       - /etc/localtime:/etc/localtime:ro
-      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - socket-proxy:/var/run
     ports:
       - 80:80
       - 443:443
@@ -29,3 +46,6 @@ networks:
 secrets:
   cf_api_token:
     file: ${APPDATA_PATH}/traefik/secrets/cf_api_token
+
+volumes:
+  socket-proxy: