alt Hacker NewsI put a firewall ahead of the Docker host so that they aren't running on the same system. Docker can do what it wants to on the host without stepping on my firewall rules.
I put a firewall ahead of the Docker host so that they aren't running on the same system. Docker can do what it wants to on the host without stepping on my firewall rules.
It makes sense but that's more overhead and the spirit of the post seems to be "can we just docker compose and be done with it?"