Madarson IT Docker Compose Server Overview

Madarson IT Docker Compose Server Overview - Extended Security

The Madarson IT Docker Compose Server with Extended Security is built on the Basic Plan, with additional hardening focused on the Ubuntu 24.04 LTS Minimal OS to meet stricter security requirements.

This plan is ideal for production environments that demand enhanced system-level protections while maintaining ease of use for containerized workloads.

Extended OS Security Highlights:

All Basic Plan security features included
Ubuntu 24.04 LTS Minimal image secured following industry-recognized hardening guideliness
Strict AppArmor profiles enabled for system services and containers
Enhanced SSH configurations including rate limiting and banner warnings
Secure sysctl kernel parameters tuned for network and filesystem security
Automatic security updates with audit logging of package changes
Fail2Ban configured with stricter, customized rules
Minimal set of system services enabled, reducing attack surface

Docker Compose Use Case:

Deploy multi-container applications securely with docker-compose up, benefiting from the underlying OS hardening.

Bonus:

Same Docker Compose templates and helper scripts as the Basic Plan

Disclaimer: Docker and Ubuntu are trademarks of their respective owners. Madarson IT is not affiliated with these companies.

Technical Details (Click to expand)

OS: Ubuntu 24.04 LTS Minimal image secured following industry-recognized hardening guidelines
Installed Software:
- Docker CE (latest)
- Docker Compose v2
- UFW firewall
- Fail2Ban (customized rules)
- Trivy (vulnerability scanner)
- ClamAV (AntiVirus scanner)
- Unattended-upgrades with audit logging
- AppArmor enabled with custom profiles
Security Hardening:
- SSH access restricted (key only, no root login) with rate limiting
- Firewall enabled with minimal allowed ports
- System tuned via secure sysctl settings
- Strict AppArmor profiles
- Fail2Ban with enhanced rules
- Minimal system services enabled
- Daily security patches with logging
Access: SSH key-based login (default user: azureuser)
Files Included:
- /opt/madarson/docker-compose.yml
- /opt/madarson/README.txt, nginx.conf
- /opt/madarson/start.sh, update.sh, secure.sh

Docker Compose Hardened Ubuntu 24.04 Minimal Server (Extended Security)Madarson It, LLC

Docker Compose Hardened Ubuntu 24.04 Minimal Server (Extended Security)

Madarson It, LLC

Docker Compose Hardened Ubuntu 24.04 Minimal Server (Extended Security)

Madarson It, LLC

Docker Compose Hardened Ubuntu 24.04 Minimal Server (Extended Security)
Madarson It, LLC