Which image for shared web hosting w/ Traefik?

Hi, Planning on hosting some PHP based web sites in a container environment. Going to use Traefik for the proxy. Trying to figure out which PHP image makes most sense. Looking for a reasonably light and secure setup. php:8.5-apache - This one I reckon should be safe and "just work", but I don't know that including Apache in each container is the best approach. php:8.5-fpm - Should be lightweight due to not including a web server, but has notes regarding being insecure to expose. It should only be exposed to the proxy server, though, so should be fine? Custom image with PHP and some other web server? Each site/stack will run as a separate user, in a separate network. Have not yet decided on Docker vs Podman. I will probably be making a custom image, possibly based on one of the above, either way.