UFW says the port is closed. Docker published it to your whole network anyway.

TL;DR: ufw enable on a Pi does what it says — until Docker is installed. Docker inserts its own...