Docker bypasses your firewall silently, and most home labs don't realize it
…The recommended way to expose a service is -p host_port:container_port , with no qualifiers. Compose files copy-pasted from project READMEs will often publish to 0.0.0.0 by…