You are ready for misterio: https://github.com/daitangio/misterio
A tiny layer around stareless docker cluster.
I created it for my homelab and it gone wild
Self-hosting is becoming a freedom factor in my humble opinion.
I have an hard time hosting my email server, it was not so diffcult 10 years ago and was trivial 20 years ago.
The reason is the anti-spam rules and the fact that Google, Microsoft and so on are creating a iron trust to each other, and the little server outside are marked spam by default.
Lets encrypt avoided a similar destiny to https connections, but the risk is always out of the window.
I mean, https was becoming "pay-us-to-publish a web server, or our browser will mark you as unsafe and do not display it".
I think it is time also to self-host private free chats and possibly other services lik DDoS services.
I keep using isso https://isso-comments.de/
I installed it on my static blog very easily, and I own all the data.
Also it is GDPR-compliant (because it provide hints on how to remove data like IPs) and it is very light.
For me Disqus and similia are a dead end.
I do not know: the lack of proper docker compose support it is a problem for me.
About security: gVistor adoption failure in Google is a proof that containerization cannot be enforced easily and container will always be less secure than a VM.
If you want proper security go to firecracker [^1].
Podman is the "RedHat/IBM docker-way" but I see very little benefit overall; never less if it works for you great and go with it!
Podman 4.7 supports both the ordinary compose (Go implementation) and older Python podman-compose. But personally I moved to quadlets and didn't look back.