Mission Brief
Plain text communication is loud. It’s bleeding data.
Prying eyes can see every bit in the wire.
You have to isolate the backend – the Semaphore UI and MySQL containers stay locked down. Unreachable for the external work.
Open a tiny hole on the stronghold to the world – the frontend is an NginX SSL proxy.
You use:
- Podman pod for network and container isolation
- The Semaphore and MySQL containers without exposing them to the world
- An NginX proxy container with SSL










