Limit exported Docker port to be only available on localhost

@morph027 not sure if we can assume people use this only locally, but I had to use this local binding because Docker would otherwise export the port on a publicly accessible server because it bypasses ufw rules.

Ref https://www.techrepublic.com/article/how-to-fix-the-docker-and-ufw-security-flaw/.