Among other things, this version uses Docker's host-based networking
rather than the ingress network. This simplifies the networking setup,
but I'm leaving ferm in place because it is easier to configure than ufw
or firewalld, and we may need to switch back again.