Depending on the load and use case, encapsulating docker itself in an lxc container or a standalone vm can be a semi maintainable and separated solution.
My thought usually is how to make any environment the equivalent of an appliance and require as little upkeep as possible.
I have been contemplating how Terraform may be able to sit in a private/hybrid cloud design, but haven't looked into it much.
If you have any examples of what to look out for it would be great to know if it hits my use case