Docker Bypasses UFW: Your Firewalled Database Is Probably Public. Here's the Fix

ufw status will say everything is denied while -p 5432:5432 is open to the internet. One docker ps line shows it; one daemon.json change stops it.