- Add .dockerignore - Use version 3 - Move wait_for_it.sh to docker-compose.yml - Persist db data - Use nginx-proxy - Use Letsencrypt in production - Rate limit in production