Discourse ordnungsgemäß herunterfahren, wenn der Host heruntergefahren wird

[omfg]

@fefrei

I know – but this doesn’t protect against other sysadmins or unattended-upgrades

You can disable unattended upgrades (on the OS level).
And you could insert those steps in the system shutdown script.
But Sam said they did that inside of the docker script.