Post #2024395
2026-05-02 10:10 UTC
Am I doing something wrong? All my services are grouped in docker compose files. Containers that have to communicate internally - a server and it's db for example - are on their own private docker network. A reverse proxy has its ports 80 and 443 open and it is on an external docker network. Services that I need to access from the outside are on this network and they do not have any ports open. Except for the torrent client, which has a UDP port open.
Replies (2)
-
@jimerson@lemmy.world 2026-05-02 15:18
It's strong, but splitting services into separate VMs is stronger than just using separate docker containers. This is especially true for the torrent client. I'm not a netsec professional, this is just my understanding of best practices.
-
@jol@discuss.tchncs.de 2026-05-08 06:47
Same. One single docker compose, and a dozen images. I get to take advantage of publicly available docker images too which makes managing and updating things a breeze.