Use single shared docker socket proxy service

monitoring/node-red/docker-compose.yml

@@ -6,12 +6,18 @@ services:
     container_name: node-red
     profiles: ["monitoring","all"]
     restart: unless-stopped
-    privileged: true
+    depends_on:
+      - docker-socket-proxy
+    environment:
+      DOCKER_HOST: tcp://docker-socket-proxy:2375
+    cap_drop:
+      - ALL
+    security_opt:
+      - no-new-privileges:true
 #    ports:
 #      - "1880:1880"
     volumes:
       - ${PROJECT_ROOT}/monitoring/node-red/data:/data
-      - /var/run/docker.sock:/var/run/docker.sock:rw
       - ${PROJECT_ROOT}:/compose
       - ${PROJECT_ROOT}/default-environment.env:/usr/src/node-red/default-environment.env:ro
       - ${PROJECT_ROOT}/default-network.yml:/usr/src/node-red/default-network.yml:ro