Better to just use a separate server, considering they start at less than $10/month. It's a lot simpler to scale, optimize, and contain threats that way.

Docker is still a good solution. I just don't think the problem you're describing absolutely requires something like Docker.