just tested few stuff my docker instance running dummy domain locally perfectly fine (otp enabled) cannot reached even if opened to outside. some trusted domain etc config needed. so good not accessible.
saw it making few outing internet connection - just for update etc maybe - its very sensitive any domain ssl cert changes once somehow running. i can spin another doocker domore tests instead breaking this.
primary use NAS + media server is best for now. other bells n whistles later that may leak data create problems. https://image.nostr.build/a60b924604241a5684901a8df04a49936548acf549f6de7383c04d822f347389.png