A real-time, interactive map of every container, network, and volume — and exactly how they connect.
DockGraph reads your Docker daemon and renders the whole picture — then keeps it in sync, live.
No agents, no database, no instrumentation of your services. DockGraph reads what Docker already knows and keeps a single source of truth in sync.
A Docker collector polls the Engine API and watches the live event stream. A compose collector auto-detects and parses any mounted compose files.
A state manager unifies both sources into one graph — runtime data always wins — so you also see services defined but not yet started.
The unified graph is broadcast over WebSocket. The React frontend lays it out with ELK and updates in place as your stack changes.
One container, mounting the Docker socket read-only. No database, no agents, no config files to write.
docker run -d -p 7800:7800 \
-v /var/run/docker.sock:/var/run/docker.sock:ro \
--label dockgraph.self=true \
dockgraph/dockgraphIt needs the Docker socket to read state — so it treats that access with the caution it deserves.
DockGraph can’t start, stop, or change anything. It observes topology — the socket is mounted :ro.
Set DG_PASSWORD to gate the UI and WebSocket behind login — Argon2id hashing, JWT sessions.
Restrict access with DG_BIND_ADDR=127.0.0.1, or front it with nginx / Caddy / Traefik for TLS.
DockGraph hides its own container, networks, and volumes from the graph. No noise, no recursion.
Spin it up, open a tab, and watch your infrastructure map itself in real time. Free and open source.