project-nomad/install
Chris Sherwood bd642ac1e8 fix(security): disable Dozzle web shell access
Dozzle's DOZZLE_ENABLE_SHELL=true on an unauthenticated port allows
anyone on the LAN to open a shell into containers, including nomad_admin
which has the Docker socket mounted — creating a path to host root.

Disables shell access while keeping log viewing and container actions
(restart/stop) enabled.

Closes #278

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-20 11:46:10 -07:00
..
sidecar-disk-collector build: fix collect-disk-info output 2026-03-14 19:54:51 -07:00
sidecar-updater fix: update channel flexibility 2026-03-05 04:06:56 +00:00
collect_disk_info.sh feat: disk info collection 2025-12-07 19:13:43 -08:00
entrypoint.sh feat(Queues): support working all queues with single command 2026-01-23 11:07:47 -08:00
install_nomad.sh build: compose and install script updates for disk-collector sidecar 2026-03-14 19:54:51 -07:00
management_compose.yaml fix(security): disable Dozzle web shell access 2026-03-20 11:46:10 -07:00
migrate-disk-collector.md build: compose and install script updates for disk-collector sidecar 2026-03-14 19:54:51 -07:00
migrate-disk-collector.sh chore: add additional warnings to migrate-disk-collector 2026-03-15 03:19:52 +00:00
run_updater_fixes.sh fix: container update pattern in run_updater_fixes 2026-03-05 04:32:09 +00:00
start_nomad.sh feat(install): add start & stop helper scripts 2025-08-08 15:07:32 -07:00
stop_nomad.sh feat(install): add start & stop helper scripts 2025-08-08 15:07:32 -07:00
uninstall_nomad.sh build: compose and install script updates for disk-collector sidecar 2026-03-14 19:54:51 -07:00
update_nomad.sh feat: [wip] self updates 2026-01-15 15:54:59 -08:00
wikipedia_en_100_mini_2025-06.zim fix(ZIM): host initial zim download in GH repo 2025-09-02 22:44:01 -07:00