Security Hardening Documentation
- Docker Socket Proxy support — full setup guide with Tecnativa/docker-socket-proxy, restricts Docker API to only needed endpoints
- DOCKER_HOST environment variable — connect via TCP to a socket proxy instead of mounting the Docker socket directly
- HTTPS / Reverse Proxy examples for Traefik and Caddy
- Security Checklist — prioritized table of hardening measures
No code changes — documentation and configuration only. The Docker CLI already respects DOCKER_HOST natively.
Full Changelog: v1.7.0...v1.7.1