I have a docker-compose workload that is allowed to make some external network requests, but should not connect to domains outside an allowlist.
Is there a good way t
