Portainer Docker Compose Example

Portainer container management UI (read-only Docker socket) with a persistent volume.

The compose.yaml

name: portainer
services:
  portainer:
    image: portainer/portainer-ce:2.21.5
    restart: unless-stopped
    ports:
      - 127.0.0.1:9443:9443
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - portainer_data:/data
    logging:
      driver: json-file
      options:
        max-size: 10m
        max-file: '3'
volumes:
  portainer_data: {}

Start it up

# Validate the configuration (does not start anything):
docker compose -f compose.yaml config

# Pull images and start in the background:
docker compose -f compose.yaml pull
docker compose -f compose.yaml up -d

# Check status and follow logs:
docker compose -f compose.yaml ps
docker compose -f compose.yaml logs -f

# Stop and remove (named volumes are kept):
docker compose -f compose.yaml down

Services

portainer — portainer/portainer-ce:2.21.5

Security notes

critical
Docker socket mounted into a container
Avoid mounting the socket. If unavoidable, use a read-only, filtered socket proxy that exposes only the endpoints needed.
warning
No healthcheck
Add a `healthcheck:` that probes a readiness endpoint or a CLI check for the service.
warning
No memory limit
Set a memory limit sized to the workload (e.g. `mem_limit: 512m`).

Open the template in the generator to apply one-click hardening.

Related templates

FAQ

How do I run this Portainer Docker Compose file?

Save it as compose.yaml, then run `docker compose up -d`. Validate first with `docker compose config` and follow logs with `docker compose logs -f`.

Do I need a version field in the Portainer Compose file?

No — modern Docker Compose does not require a top-level version field, and this example does not include one.

How do I customize this Portainer template?

Open it in the free Docker Compose Generator to change images, ports, volumes, networks, environment variables, and health checks visually, then download your compose.yaml.

Independent educational example. "Docker" is a trademark of Docker, Inc. Review and adapt before using in production.