Skip to content

Mount Unix sockets instead of listening on 0.0.0.0 for memcached and postgres? #526

@jpmckinney

Description

@jpmckinney

Unix sockets can easily be mounted as volumes e.g. /var/run/app.sock:/var/run/app.sock

Advantage: Arguably more secure (though external firewall is sufficient)

Disadvantage: Need to figure out correct permissions on the socket itself. Might end up being messier.

Not sure if worthwhile, but thought I'd open an issue to discuss.

Metadata

Metadata

Assignees

No one assigned

    Labels

    discussionservicesRelating to common services like NTP, Apache, uWSGI, cron, etc.

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions