Comment by adql

Having to communicate with outside is kinda overkill if you just want to have container A talking to container B.

But the solution is internal CA, not self signed certs that defeat near-entire point of encrypting communication.