I dockerized my API server that you can find here,obviously I used the node docker to do the job.
- Nginx
- Node
- Certbot
- Watchtower
I set docker to run the network in host mode, so will provide the best performance possible. I tested this set up with wrk, the overhead due to docker is minimal.
Related to docker the only thing I can do is keep updated all the docker, this is possible with Watchtower.
With Certbot I can obtain an SSL certificate from let's encrypt.
Because following the node.js official documentation using node.js with root privileges is a bad thing in terms of security, so I have installed Nginx to act as a proxy manager and to server certificates provided by Certbot.