> by default docker will effectively override ufw port restrictions Thanks for that reminder. I discovered that accidentally last year with a toy project and i

> by default docker will effectively override ufw port restrictions Thanks for that reminder. I discovered that accidentally last year with a toy project and it blew my mind! I still think that is a terrible bad default behavior… and I was disappointed to learn that root-defined UFW rules were not the final answer.