Staging services should bind only to the application container network.
Do not place secrets in the document root.