steigr

What about https://github.com/mittwald/kubernetes-replicator

I do not see an advantage over socat, which can listen on _TCP_-sockets (among 20 other „socket“ inputs) and forward them into unix-sockets. Please tell me? :-/

Don’t stop SSID broadcasting (2.5, tip 6/2) as the clients start to scan for this SSIDs everywhere and unveiling your hidden SSID even at remote places.

volume solution sounds good because that’s state which should be kept outside. Think of a Kirby-Runtime-image providing your site from docker volume. Share the volume between kirby container and utility container pulling the git bits into the volume for devision of concerns (keeps git and credentials in separate container).