add missing changes

Signed-off-by: Bill Vandenberk <bill@vandenberk.me>

docker/docker-compose/README.md

@@ -1,4 +1,4 @@
-# A Warning
+# Warning
 This environment is provided for demonstration purposes only and does not represent a production ready deployment of falco
 
 # Components
@@ -6,6 +6,7 @@ The components that this docker-compose file spins up are falco, falcosidekick,
 
 # Running
 To start this environment run `docker-compose up`
+Note: You may need to use sudo for falco to start correctly.
 
 # Cleaning up
 To clean up run `docker-compose rm`

docker/docker-compose/config/http_output.yml

@@ -0,0 +1,10 @@
+# [Stable] `http_output`
+#
+# Send logs to an HTTP endpoint or webhook.
+#
+# When using falcosidekick, it is necessary to set `json_output` to true.
+json_output: true
+json_include_output_property: true
+http_output:
+  enabled: true
+  url: "http://falco-sidekick:2801/"

docker/docker-compose/docker-compose.yaml

@@ -12,7 +12,7 @@ services:
       - /var/run/docker.sock:/host/var/run/docker.sock
       - /proc:/host/proc:ro
       - /etc:/host/etc:ro
-    command: '/usr/bin/falco -o http_output.enabled=true -o http_output.url="http://falco-sidekick:2801/"'
+      - ./config/http_output.yml:/etc/falco/config.d/http_output.yml
     image: falcosecurity/falco-no-driver:latest
 
   sidekick: