D8: Docker Security Hardening με Ansible 🔒

Τι θα καλύψουμε

D8.1 Security Concepts για Docker
     ├── Attack surface
     └── Defense in depth

D8.2 Container Runtime Security
     ├── no-new-privileges
     ├── read_only rootfs
     ├── Non-root user
     └── Capabilities

D8.3 Secrets Management
     ├── Αποφυγή env var secrets
     ├── Docker secrets (Swarm)
     └── Ansible Vault + volume pattern

D8.4 Image Security
     ├── Minimal base images
     ├── Non-root Dockerfile
     └── Image scanning με Trivy

D8.5 Network Security
     ├── Internal networks
     ├── Publish μόνο απαραίτητα ports
     └── Firewall integration

D8.6 Πρακτικό παράδειγμα
     └── Hardened production stack

Υποπαράγραφοι