Create a single external network called "external". Create container-specific networks. Only a few containers need access to these. So far: openldap, postgres.