But... You literally have ports rules in there. Rules that expose ports.
You don't get to grumble that docker is doing something when you're telling it to do it
Dockers manipulation of nftables is pretty well defined in their documentation. If you dig deep everything is tagged and natted through to the docker internal networks.
As to the usage of the docker socket that is widely advised against unless you really know what you're doing.
Much like what happened in the original Minecraft, Voyager is entering a region where the simulation breaks down.
‘She pulled into the middle lane in an attempt to get away from him but he followed her and rammed her again.’
The woman pulled her Tesla into the hard shoulder and the silver BMW ‘got away’.
Meaning she was in the offside overtaking lane and even then still had room to pull into the nearside lane to let overtaking cars past. I don't condone what he did but fuck people who sit in the overtaking lanes.
He was selling the vaccine passports that he was issued to anti-vaxxers.
Really confused about this track, having never heard it before - and both owning and playing to death the original 1997 CD release.
Turns out its from a 20th aniversary release of the album.
Did someone manage to grab the flatpak in a usb installable format? It's no longer on flathub, boo.
Someone is having a very bad day
I think thats radicale
Quite different!
Sure, I get it, this stuff should be accessible for all. Easy to use with sane defaults and all that. But at the end of the day anyone wanting to using this stuff is exposing potential/actual vulnerabilites to the internet (via the OS, the software stack, the configuration, ... ad nauseum), and the management and ultimate responsibility for that falls on their shoulders.
If they're not doing the absolute minimum of R'ingTFM for something as complex as Docker then what else has been missed?
Unless you tell it otherwise that's exactly what it does. If you don't bind ports good luck accessing your NAT'd 172.17.0.x:3001 service from the internet. Podman has the exact same functionality.