security/

Splitting one Docker host into network tiers

Every container on my Docker host shared one bridge, so any app could reach the vault, the auth database and the mail relay. I split it into six networks, internal for the databases, with a /24 address pool. Always set the Compose project name on recreate or you get empty volumes.

networking/ #docker#security 6 min