Build docker images that only responds to public SDK events

Build docker images that only responds to public SDK events. Kind of what the edge proxy does, but with the actual API code rather than the proxy. The idea being that you run that image in the public facing part of your infra, but have another container running the entire API behind a firewall/vpn etc.

I was thinking we could run the main python django app but with an optional flag that would stop it serving requests to all private endpoints - what do people think? I think its a good idea and adds flexibility - we could add it to the helm chart etc too. So maybe it doesnt need to be a new image, it could just be an additional command line param sent to the main image.