IPv6 Firewall Recommendations

I have recently configured my LXD containers with public IPv6 addresses. Now I want to lock it down more. Does anyone know of any guides or recommendations for configuring this in LXD? Would this be best achieved using ACLs or should I disable the LXD configured IPv6 firewall and manage the rules myself?