Docker Settings

Configure Docker container settings, networking, and resource limits

Network Configuration

Wings creates and manages a dedicated Docker network for game server containers. This network is created automatically if it doesn’t exist.

Basic Network Settings

docker:
  network:
    name: pterodactyl_nw
    driver: bridge
    network_mode: pterodactyl_nw

Defaults:

• name: pterodactyl_nw
• driver: bridge
• network_mode: pterodactyl_nw

Network Interface

docker:
  network:
    interface: 172.18.0.1

Default: 172.18.0.1

The interface address used to create the network. Must not conflict with other Docker networks or system interfaces.

DNS Settings

docker:
  network:
    dns:
      - 1.1.1.1
      - 1.0.0.1

Default: ["1.1.1.1", "1.0.0.1"] (Cloudflare DNS)

DNS servers used by containers.

Network Interfaces (IPv4/IPv6)

docker:
  network:
    interfaces:
      v4:
        subnet: 172.18.0.0/16
        gateway: 172.18.0.1
      v6:
        subnet: fdba:17c8:6c94::/64
        gateway: fdba:17c8:6c94::1011

IPv4 Defaults:

• subnet: 172.18.0.0/16
• gateway: 172.18.0.1

IPv6 Defaults:

• subnet: fdba:17c8:6c94::/64
• gateway: fdba:17c8:6c94::1011

Advanced Network Options

docker:
  network:
    ispn: false
    is_internal: false
    enable_icc: true
    network_mtu: 1500

Defaults:

• ispn: false
• is_internal: false - Whether the network is internal (no external access)
• enable_icc: true - Enable Inter-Container Communication
• network_mtu: 1500 - Maximum Transmission Unit size

Container Configuration

Domain Name

docker:
  domainname: ""

Default: Empty string

Docker domain name for all containers.

Tmpfs Size

docker:
  tmpfs_size: 100

Default: 100 MB

Size of the /tmp directory mounted into containers. Uses host system memory.

Avoid allocating too much tmpfs size as it uses the host’s RAM and Wings doesn’t track this usage.

Container PID Limit

docker:
  container_pid_limit: 512

Default: 512

Maximum number of processes that can be active in a container simultaneously.

This is a security feature to prevent malicious processes from exhausting host PIDs in shared-hosting environments.

User Namespace Mode

docker:
  userns_mode: ""

Default: Empty string (uses daemon’s configuration)

Options:

• Empty string - Use daemon’s user namespace remapping configuration
• host - Disable user namespace remapping for Pterodactyl containers

Sets the user namespace mode when user namespace remapping is enabled in Docker.

Installer Limits

docker:
  installer_limits:
    memory: 1024
    cpu: 100

Defaults:

• memory: 1024 MB
• cpu: 100 (100% of one core)

Resource limits for server installation containers. The higher value between these limits and the server’s configured limits is used.

Memory Overhead

docker:
  overhead:
    override: false
    default_multiplier: 1.05
    multipliers:
      2048: 1.15
      4096: 1.10

Defaults:

• override: false
• default_multiplier: 1.05 (5% overhead)

Memory overhead multiplier to prevent issues with software like the JVM exceeding memory limits.

Default Multipliers (when override is false)

• Memory ≤ 2048 MB: 1.15 (15% overhead)
• Memory ≤ 4096 MB: 1.10 (10% overhead)
• Memory > 4096 MB: 1.05 (5% overhead)

Custom Multipliers

To define custom overhead multipliers:

docker:
  overhead:
    override: true
    default_multiplier: 1.05
    multipliers:
      1024: 1.20  # 20% overhead for <= 1024 MB
      2048: 1.15  # 15% overhead for <= 2048 MB
      4096: 1.10  # 10% overhead for <= 4096 MB

Container Logging

docker:
  log_config:
    type: local
    config:
      max-size: "5m"
      max-file: "1"
      compress: "false"
      mode: "non-blocking"

Defaults:

• type: local
• max-size: 5m (5 megabytes)
• max-file: 1 (keep 1 log file)
• compress: false
• mode: non-blocking

Docker logging driver configuration for containers.

Common log types:

• local - Docker’s local logging driver (recommended)
• json-file - JSON file logging
• none - Disable logging
• syslog - Syslog logging
• journald - Systemd journal logging

Registry Authentication

docker:
  registries:
    ghcr.io:
      username: your-username
      password: your-token
    registry.example.com:
      username: your-username
      password: your-password

Authentication credentials for private Docker registries. Required for pulling images from private registries.

Performance Optimization

Performant Inspect

docker:
  use_performant_inspect: true

Default: true

Enables optimized container inspection. Generally should be left enabled.

Example Configuration

Here’s a complete Docker configuration example:

docker:
  network:
    name: pterodactyl_nw
    driver: bridge
    network_mode: pterodactyl_nw
    interface: 172.18.0.1
    ispn: false
    is_internal: false
    enable_icc: true
    network_mtu: 1500
    dns:
      - 1.1.1.1
      - 1.0.0.1
    interfaces:
      v4:
        subnet: 172.18.0.0/16
        gateway: 172.18.0.1
      v6:
        subnet: fdba:17c8:6c94::/64
        gateway: fdba:17c8:6c94::1011
  
  domainname: ""
  tmpfs_size: 100
  container_pid_limit: 512
  userns_mode: ""
  use_performant_inspect: true
  
  installer_limits:
    memory: 1024
    cpu: 100
  
  overhead:
    override: false
    default_multiplier: 1.05
  
  log_config:
    type: local
    config:
      max-size: "5m"
      max-file: "1"
      compress: "false"
      mode: "non-blocking"
  
  registries: {}

Network Isolation

For enhanced security, you can configure network isolation:

docker:
  network:
    is_internal: true  # Prevent external access
    enable_icc: false  # Disable inter-container communication

Enabling is_internal will prevent containers from accessing the internet. Only use this if your game servers don’t require external connectivity.