Inspired by this comment to try to learn what I’m missing.

  • Cloudflare proxy
  • Reverse Proxy
  • Fail2ban
  • Docker containers on their own networks

Another concern I have is does it need to be on a separate machine on a vlan from the rest of the network or is that too much?

  • MangoPenguinEnglish
    3·
    12 days ago

    Containers can talk to each other without any ports exposed at all, they just need to be added to the same docker network.

    • ikidd@lemmy.worldEnglish
      1·
      12 days ago

      I was getting more at stacks on a host talking, ie: you have a postgres stack with PG and Pgadmin, but want to use it with other stacks or k8s swarm, without exposing the pg port outside the machine. You are controlling other containers from interacting except on the allowed ports, and keeping those port from being available off the host.

      • MangoPenguinEnglish
        3·
        12 days ago

        You can do that by joining the containers to the same docker network, you don’t need to expose ports even to localhost.