Docker-compose, not k8s. Set up a cron job to run a script to update the OS, pull all your containers and reboot after hours once a week or once a day. Make sur

Docker-compose, not k8s. Set up a cron job to run a script to update the OS, pull all your containers and reboot after hours once a week or once a day. Make sure the script specifies non interactive. Set up alerting for low disk space, see https://netdata.cloud https://netdata.cloud or use your own tool. Set up firewall. Use SSL if you can, wireguard if you can't. Even internal networks should use http. I have something very similar set up to run a few Game Servers and provide a file and container management user interface. It's been running for a few years whenever I hear about a security incident I go check and it's always updated this far. Theoretically you should be able to do something very similar by using aws cloud formation. Every time you go to update you would create a new image, install your dependencies, save it, put an instance of the new image up, divert new traffic to the new instance, shut down and delete the old instance.