If the BTC client doesn't have a wallet, I don't know if you need to secure it that well. Docker and nGinx are pretty good, but you can just run without either one. There are tutorials to run it on a cheap Raspberry Pi and separate at a hardware level.
I recommend off-line wallets for actual BTC storage.