“Here’s a few patterns I’ve picked up based on using Docker since 2014.”
One Compose file for dev and prod. A non-root user. Health checks set by environment variables. None of it is exotic, and most teams still skip it. Kubernetes gets the conference talks, but a lot of real money runs on a single box and a docker-compose.yml.