My question is related to my specific environment : I'm running a web application in a docker container and a database in another container.
I use docker compose to run both containers :
- my web app is linked to a network shared with all other app containers and my proxy container (which is bound to host interface)
- my database container is linked to a specific network only shared between my web app container and my database container
I already set a password authentication between both containers. But now, I looking backwards and I'm wondering if it's really useful in this context.
As the network between my app container and database container is built by docker, no other containers could connect on it and try to access my database. So why set a password ?
I guess my question is relative to the security provided by the docker specific network and I have actually no idea of how it works.
Any advices would be appreciate.