And in this, we're entirely in agreement! I run my personal web stuff in a docker container per application (running as a dedicated user per app via docker's -

And in this, we're entirely in agreement! I run my personal web stuff in a docker container per application (running as a dedicated user per app via docker's --user=username:group) which iptables rules per user. Kubernetes would work, but is overkill for the 5 vhosts I run via a pretty stripped down Apache config.