Compose services
Frontend waits for the backend healthcheck. Frontend, backend, Traefik, and
socket proxies use
restart: unless-stopped.
docker-proxy can mutate Docker state through its enabled API operations and
must be treated as a privileged control-plane service. Its port is available
only on the internal docker-control network. traefik-docker-proxy is a
separate discovery subset with mutation methods disabled.
Dynamic workloads
Dynamic workloads are not Compose services, but the P-BitM CLI includes them in
python3 p-bitm.py down. The command force-removes campaign, target-browser,
and egress containers and their campaign-scoped networks before completing
the global shutdown.
Healthchecks
- Frontend checks local HTTPS with certificate verification disabled only for the container-local probe.
- Backend checks
http://127.0.0.1:8443/health. - Traefik uses its built-in ping healthcheck.