Monitoring, checked 2026-09-07
Dozzle: Docker configuration reference
Real-time Docker container log viewer with a web UI, reading logs straight from the Docker Engine API.
At a glance
Ports
Ports| Port | What listens | Source |
|---|
8080 | HTTP listener for the web UI. Point the reverse proxy here. | source for port 8080 |
7007 (dozzle-agent) | Listener for a Dozzle agent, used when connecting Dozzle to a remote Docker host without exposing the Docker socket over the network. | source for port 7007 |
Environment variables
Environment variables| Variable | Required | What it does | Example | Source |
|---|
DOZZLE_BASE | No | Mounts the UI at a sub-path instead of the root and rewrites asset URLs to match. Needed when Dozzle shares a hostname with other services behind the same proxy. | /foobar | source for DOZZLE_BASE |
DOZZLE_REMOTE_AGENT | No | Comma-separated list of Dozzle agents to connect to. Mounting the local Docker socket is then optional, and only needed to also show the local host's containers. | agent1:7007,agent2:7007 | source for DOZZLE_REMOTE_AGENT |
DOZZLE_AUTH_PROVIDER | No | Enables the built-in username/password auth provider. Unauthenticated by default. | simple | source for DOZZLE_AUTH_PROVIDER |
DOZZLE_FILTER | No | Restricts which containers are shown, using the same filter syntax as docker ps. | label=com.example.app | source for DOZZLE_FILTER |
Volumes that must persist
Volumes| Path | What is in it | Source |
|---|
/var/run/docker.sock | Read-only mount giving Dozzle access to container lists and logs. Grants root-equivalent host access, so keep it off any network reachable without an agent or socket proxy. | source for /var/run/docker.sock |
/data | Persists Dozzle's own settings (saved filters, users) across a restart. | source for /data |
Behind a reverse proxy
- Dozzle streams logs over Server-Sent Events. The proxy must disable response buffering or logs arrive in bursts or not at all; Dozzle sends X-Accel-Buffering: no but not every proxy honours it. source for this reverse-proxy note
- Forward WebSocket upgrade headers (Upgrade, Connection) or the shell and container attach features fail to connect. source for this reverse-proxy note
- Do not compress text/event-stream responses; compression middleware, including Traefik's default compress middleware, breaks the SSE log stream. source for this reverse-proxy note
- Increase proxy read/send timeouts to several minutes; short idle timeouts on the log stream disconnect it after a few seconds of quiet logs. source for this reverse-proxy note
Release timeline
Releases| Version | Date | Breaking | What changed | Source |
|---|
v10.10.0 | 2026-09-06 | No | Adds bundled app icons for rspamd and powerdns. | source for release v10.10.0 |
v10.9.0 | 2026-09-02 | No | Adds a check for newer container images with an update prompt, and shows app icons for well-known services. | source for release v10.9.0 |
v10.8.0 | 2026-08-31 | No | Moves the status icon next to the container name and shows stopped containers on the dashboard. | source for release v10.8.0 |
v10.7.5 | 2026-08-28 | Yes | Scopes cloud search, alerts and debug access to user labels and adds a dedicated notifications role. | source for release v10.7.5 |
If it is not coming up
Read from the upstream documentation, repository and container registry by Keita Emsden on 2026-09-07. Every row links the page it came from. Upstream changes without telling anyone, so check the source link before you rely on a value.
Other app references
All app references