OpenWA

# OpenWA - Docker Compose Configuration
# Smart Orchestration with Profiles

services:
  # ===== CORE: Docker Socket Proxy (sole container with /var/run/docker.sock access) =====
  docker-proxy:
    image: tecnativa/docker-socket-proxy:v0.4.2
    container_name: openwa-docker-proxy
    restart: unless-stopped
    # Only on the isolated internal network — reachable solely by openwa-api, NOT the
    # dashboard or any other peer. `internal: true` also denies the proxy
    # outbound access; it only needs the locally-mounted docker socket.
    networks:
      - internal-docker
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    environment:
      # Minimal set that keeps DockerService (src/modules/docker/docker.service.ts) working:
      # PING (health), INFO (getSystemInfo), CONTAINERS (list/inspect/create/start/stop),
      # IMAGES (pull), VOLUMES (createVolume). POST is the proxy's single all-or-nothing
# ...