I’m running Roon server on docker on a Synology NAS. Initially I was using the host network, but just last week I migrated to a configuration using MacVLANs. I’ve reserved one of my NICs to the Roon server and Roon extension and in doing so, keeping Roon in it’s own VLAN, away for the host and other dockers.