Commit graph

3 commits

Author SHA1 Message Date
Julius Zeidler
0cba6bc8b9 chore(script): set claude.sh as executable 2026-04-14 17:30:39 +02:00
Julius Zeidler
66c74ee396 initial config 2026-04-14 17:25:33 +02:00
docker-claude
e0e5e03e58 feat(docker): add isolated Claude Code environment with proxy sidecar
Two-container setup: claude (UID 1000, internal-only network) and proxy
(Squid, UID 13). The internal Docker network uses internal: true so the
claude container has no direct internet route. All egress is tunnelled
through the Squid sidecar which enforces a domain allowlist. Both
containers drop all capabilities and set no-new-privileges. claude.sh
provides start/stop/run/update/logs/status/shell lifecycle management.
2026-04-14 17:23:02 +02:00