Notes on Docker Compose monitoring, container security, and how to run a small production stack.
The :ro flag on a Docker socket bind-mount stops you writing to one file. It does nothing to the API behind it. Here is why, and what to do instead.