Please see the docker-compose file.
| Name | Default value | Description |
|---|---|---|
| PUID | 7077 |
UID of the user pomerium should be running as. |
| PGID | 7077 |
GID of the user pomerium should be running as. |
| POMERIUM_ARGS | -config /config/config.yml |
Command line arguments passed to the Pomerium executable. |
The container does not explicitly expose any ports because the port on which Pomerium listens depends on the configuration.
| Container path | Description |
|---|---|
| /config | The Pomerium config is expected to be in this directory by default. |
The container is regularly scanned for vulnerabilities and updated. Further info can be found in the Security tab.
The container supports privilege drop. Even though the container starts as root, it will use the permissions only to perform the initial set up. The pomerium process runs as UID/GID provided in the PUID and PGID environment variables.
user Docker compose property or using the --user argument. This would break the privilege drop logic.