I just deploy Postgres and my app with docker behind Traefik loadbalancer for docker containers as I mentioned to you in this thread:
I deploy with a small bash script from my computer.
I build the VM in digital ocean with an init script, therefore when it comes online its already secured, as I mention here: