I second this, it's great. Commonly called "Quadlets".

I also use BGP advertised pod networks so each pod gets it's own IP address that's directly routable (l3 ipvlan) with the rest of my network (hint, don't use 100.64.0.0/10 for that if you use tailscale), so I don't bother with NAT on the host itself or port mapping or port conflicts. It also makes caddy in front of it super easy, barely an inconvenience.

Quadlets looked super interesting when I stumbled upon it. However it still felt too much for my "few go binaries thrown on a server" setup. I ended up going with Ansible to set things up (and of course I use systemd).