Container-Mon

Get notified when your Docker containers are unhealthy.

Prerequisites

• Have Go 1.17+ or Docker installed
• A notification service supported by Shoutrrr and the required API keys or other configuration for your chosen service (e.g: Telegram, Discord, Slack, Teams etc)

Configuration

All configuration is done via environment variables, see the table below for all options and default values. Only CONTAINERMON_NOTIFICATION_URL is mandatory, all other fields are optional.

Usage

• Stand-alone: go run app.go
• Docker:

    docker run \
    -v /var/run/docker.sock:/var/run/docker.sock \
    -e CONTAINERMON_NOTIFICATION_URL=telegram://token@telegram?channels=channel-1 \
    ghcr.io/rafhaanshah/container-mon:latest
  

• Docker-Compose:

  version: "3.8"
    services:
      container-mon:
        container_name: container-mon
        image: ghcr.io/rafhaanshah/container-mon:latest
        restart: unless-stopped
        volumes:
          - /var/run/docker.sock:/var/run/docker.sock
        environment:
          - CONTAINERMON_NOTIFICATION_URL=telegram://token@telegram?channels=channel-1
  

Security Considerations

• It can be considered a security risk to directly map your Docket socket inside a container. A proxy such as Socket-Proxy can be used to give fine-grained access to parts of the Docker API, this application only needs to be able to read a list of running containers ->

    docker run \
    -e DOCKER_HOST=tcp://socket-proxy:2375
    ...
  

• This container runs as root by default to access the Docker socket. You may run it as another user that has access to the socket as described here: Running a Docker container as a non-root user ->

    docker run \
    -u $(id -u):$(stat -c '%g' "/var/run/docker.sock") \
    ...
  

License

MIT