Is it worth stuffing everything into Docker?

Question

ubuntu

Hello!
Not to say that enikey in terms of administration and everything like that, so the question arose. While talking with one person, he noticed that I did not have everything in the docker. According to him, running applications in docker as in a sandbox will protect against problems (or from "hacking the entire system"). Because of this, the question arises, is it worth it to “push” everything into Docker? Apache, mysql, grafana, netdata and similar systems? Is it safer than what I have now?
The fact is that in addition to the "working" systems (the Apache on which the site is running), I have home files on the server (archival photos, videos and similar files that I don’t want to lose, but which you shouldn’t delete either). And when my friend heard about it, he strongly advised to "Dockerize" everything, because it's "safe"
Question to the groping) Is it worth stuffing everything into the docker? How much safer is it and why do it at all? And is it necessary? And how then will Apache communicate with the database if they are independent? what about netdata-influxdb-grafana? How are they? And things like that?
By the way, as you can see, I don’t really understand docker. Thanks in advance for your reply!

Answer 1

Pushing everything into docker won't provide security by default. There is no magic, safety depends only on you.
To the question “is it worth stuffing everything into the docker”, I answer positively. Because it will give you convenience. (1) Communication between containers will be carried out through the docker interface, which will greatly facilitate the configs. (2) Management of the environment will become centralized and unified, and most importantly, explicit. (3) Scaling, with docker you can easily run an additional container process, or deploy to other machines with docker swarm.
Containers don't really need to be state dependent, but applications inside them can. For most applications, like DBMS, this is not inevitable at all. And here docker provides convenient tools: you can always just map the container directory to the host directory, or use a processless data container, or create a volume, and even connect a remote volume via nfs.
In general, yes—push everything into the docker.

Answer 2

Docker can give you a tool to return to point X, namely to the beginning. That is, if you are scammed, you can always return to the starting point X. But this is only a small part of its capabilities, I think you should read the docks about Dockers again. Chances are you haven't reached your full potential.