Perhaps, chrooted environment is required for effeciently serving static files, I don&#x27;t know.<p>And of all apps - nginx, which has been designed to be self-contained (process-isolation is good enough) and has almost zero external dependencies (openssl and pcre, which are parts of any modern OS). I could understand the idea to &quot;containerize&quot; that pile of Java crap with its 100500 maven dependencies just in order not to touch it again, but nginx...<p>BTW, does Docker&#x27;s &quot;port mapping&quot;, which is, of course, has zero overhead, is what one needs in front of nginx in production?