> I would also like to add a list of allowed site, closing all the others, but it is quite complex from docker.

Maybe use two containers in the same docker network. One docker container has the agent and is not allowed to leave the network. The other container you'd run a proxy in with whitelisting and that container is allowed to leave the network.