dozzle/docs/guide/remote-hosts.md

title

title
Remote Host Setup

Remote Host Setup

Dozzle supports connecting to multiple remote hosts via tcp:// using TLS and non-secured connections. Dozzle will need to have appropriate certs mounted to use secured connection. ssh:// is not supported because Dozzle docker image does not ship with any ssh clients.

Connecting to remote hosts

Remote hosts can be configured with --remote-host or DOZZLE_REMOTE_HOST. All certs must be mounted to /certs directory. The /certs directory expects to have /certs/{ca,cert,key}.pem or /certs/{host}/{ca,cert,key}.pem in case of multiple hosts.

Note the {host} value referred to here is the IP or FQDN configured and not the optional label.

Multiple --remote-host flags can be used to specify multiple hosts. However, using DOZZLE_REMOTE_HOST the value should be comma separated.

::: code-group

$ docker run -v /var/run/docker.sock:/var/run/docker.sock -v /path/to/certs:/certs -p 8080:8080 amir20/dozzle --remote-host tcp://167.99.1.1:2376 --remote-host tcp://167.99.1.2:2376

version: "3"
services:
  dozzle:
    image: amir20/dozzle:latest
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - /path/to/certs:/certs
    ports:
      - 8080:8080
    environment:
      DOZZLE_REMOTE_HOST: tcp://167.99.1.1:2376,tcp://167.99.1.2:2376

:::

Connecting with a socket proxy

If you are in a private network then you can use Docker Socket Proxy which expose docker.sock file without the need of TLS. Dozzle will never try to write to Docker but it will need access to list APIs. The following command will start a proxy with minimal access.

docker container run --privileged -e CONTAINERS=1 -e INFO=1 -v /var/run/docker.sock:/var/run/docker.sock -p 2375:2375 tecnativa/docker-socket-proxy

[!INFO] > CONTAINERS=1 is required to list running containers. EVENTS is also needed but it is enabled by default. INFO=1 is optional but it will provide more information on host meta data.

Running Dozzle without any certs should work. Here is an example:

docker run --volume=/var/run/docker.sock:/var/run/docker.sock -p 8080:8080 amir20/dozzle --remote-host tcp://123.1.1.1:2375

Warning

Docker Socket Proxy is not recommended for production use. It is only for private networks.

Adding labels to hosts

--remote-host supports host labels by appending them to the connection string with |. For example, --remote-host tcp://123.1.1.1:2375|foobar.com will use foobar.com as the label in the UI. A full example of this using the CLI or compose are:

::: code-group

docker run --volume=/var/run/docker.sock:/var/run/docker.sock -p 8080:8080 amir20/dozzle --remote-host tcp://123.1.1.1:2375|foobar.com

version: "3"
services:
  dozzle:
    image: amir20/dozzle:latest
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - /path/to/certs:/certs
    ports:
      - 8080:8080
    environment:
      DOZZLE_REMOTE_HOST: tcp://167.99.1.1:2376|foo.com,tcp://167.99.1.2:2376|bar.com

:::

Changing localhost label

localhost is a special connection and uses different configuration than --remote-host. Changing the label for localhost can be done using the --hostname or DOZZLE_HOSTNAME env variable. See hostname page for examples on how to use this flag.