by default docker binds external addresses to 0.0.0.0 so the port should be on all interfaces (and this includes even if the service inside only listens on localhost)