Allowlist Library

Community Contributed Allowlists

These are suggested service-specific allowlists contributed by community members.

Beszel

Tested with version 0.18.2

Method	Allow List
GET	(/v1\.\d+)?/(containers/(json|\w+/(json|logs|stats))|info|version)(\?\S*)?

Crowdsec

Tested with version 1.7.3

Method	Allow List
GET	(/v[[:digit:].]+)?/(version|containers|_ping|info|events)((/|\?)[[:graph:]]+)?
HEAD	(/v[[:digit:].]+)?/_ping

Diun

Tested with version 4.31

Method	Allow List
GET	(/v1\.\d+)?/(containers/(json|\w+/json)|images/\S+/json|services|version)(\?\S*)?
HEAD	(/v1\.\d+)?/_ping

Dockhand

Tested with version 1.0.49

Method	Allow List
GET	(/v[[:digit:].]+)?/(events|version|containers|volumes|images|networks|_ping|info|distribution|exec|system)((/|\?)[[:graph:]]+)?
HEAD	(/v[[:digit:].]+)?/(containers|images|_ping)((/|\?)[[:graph:]]+)?
POST	(/v[[:digit:].]+)?/(containers|images|volumes|networks|exec)((/|\?)[[:graph:]]+)?
PUT	(/v[[:digit:].]+)?/(containers|volumes)((/|\?)[[:graph:]]+)?
DELETE	(/v[[:digit:].]+)?/(containers|images|volumes|networks)((/|\?)[[:graph:]]+)?

Traefik

Tested with version 3.7.13

Method	Allow List
GET	(/v[[:digit:].]+)?/(version|containers|_ping|\info|events)((/|\?)[[:graph:]]+)?
HEAD	(/v[[:digit:].]+)?/_ping

Watchtower

Tested with nickfedor's version 1.22.3

Method	Allow List
GET	(/v[[:digit:].]+)?/(version|containers|images|_ping|info)((/|\?)[[:graph:]]+)?
HEAD	(/v[[:digit:].]+)?/_ping
POST	(/v[[:digit:].]+)?/(containers|images|networks)((/|\?)[[:graph:]]+)?
DELETE	(/v[[:digit:].]+)?/(containers|images)((/|\?)[[:graph:]]+)?