A hardened Docker Compose reference for homelabs — best practices, security defaults, re…