docker-gc-cron VS alpine-mariadb

To help prevent any access into my host from the containers if you manage to get past all of that, any container that needs to access the docker socket (Watchtower, Traefik, Portainer, Dozzle, Docker-gc-cron, traefik-cloudflare-companion) get their access through a socket proxy and are all on their own docker network to help prevent access to the socket directly. Socket Proxy

I currently use the linuxserver nextcloud image with the mariadb image from yobasystems because it's more lightweight than others I've found. Happy to share my docker-compose.yml file if useful. I have been intending to migrate to the official nextcloud image but haven't found a good time to do it yet. I trust linuxserver images enough, they have a good reputation, but I like to be as close to upstream as possible. Mariadb is one example where the arm architecture isn't officially supported. I chose a third-party image rather than built my own because nextcloud was one of the first things I migrated over to docker before I learnt how to build images. Goes to show learning docker does take time :)

Try https://github.com/yobasystems/alpine-mariadb