Comment by GordonS

Wouldn't you generally want all that stuff on the Docker host though?

EDIT: or running as separate containers on the host - the point is that these are security provisions you want to apply across all containers, not just for Nginx.