[lmarcos]

How do you setup sshd or the ufw, or fail2ban... with Docker? I do see the point on running nginx and a Python apps using Docker, though.

[Macha]

How do you setup sshd with ansible? You need some form of access for initial provisioning, Ansible doesn't fix that either.

Sure, you can take that manually configured sshd and replace it with something managed by ansible _after_ the initial setup, but not before.