The wordpress-docker-sec version focused on Nginx. Same audit tools, but with the hardening applied at the web server level instead of the application.
Both repos together cover most of the typical attack surface of a WordPress in production.
+12 stars on GitHub.