[dewey]

> In scope, do they cover securing the instance?

Most of these I checked don't, but a recent Ubuntu version is perfectly fine to use as-is.

> Is there any automation for creating networks of instances?

Not that I'm aware, it would also defeat the purpose of these tools a bit that are supposed to be simple. (Dokku is "just" a shell script).