Iβm moving to a new machine soon and want to re-evaluate some security practices while Iβm doing it. My current server is debian with all apps containerized in docker with root. Iβd like to harden some stuff, especially vaultwarden but Iβm concerned about transitioning to podman while using complex docker setups like nextcloud-aio. Do you have experience hardening your containers by switching? Is it worth it? How long is a piece of string?
Yeah, I use systemd for the self-host stuff, but you should be able to use docker-compose files with podman-compose with no, or only minor, changes. Theoretically. If youβre comfortable with compose, you may have more luck. I didnβt have a lot of experience with docker-compose, and so when thereβs hiccups I tend to just give up and do it manually, because it works just fine that way, too, and itβs easier (for me).
