Docker security hardening tips

[piprett]

Document how to harden it such that it can access the internet, but not LAN ports, except for MQTT. mTLS.