Since all the tools around that orchestrate Docker Compose don't do these best practices, I made my own: https://yoink.is/

Things like a good security posture by default, health checks, drift detection, and port forwarding.