docs(security): add Docker DOCKER-USER hardening guidance

This commit is contained in:
Doruk Ardahan
2026-02-26 17:09:33 +03:00
committed by George Pickett
parent 490670128b
commit 655cefaedd
2 changed files with 47 additions and 1 deletions

View File

@@ -28,6 +28,9 @@ Sandboxing details: [Sandboxing](/gateway/sandboxing)
- Docker Desktop (or Docker Engine) + Docker Compose v2
- At least 2 GB RAM for image build (`pnpm install` may be OOM-killed on 1 GB hosts with exit 137)
- Enough disk for images + logs
- If running on a VPS/public host, review
[Security hardening for network exposure](/gateway/security#04-network-exposure-bind--port--firewall),
especially Docker `DOCKER-USER` firewall policy.
## Containerized Gateway (Docker Compose)