Thanks for your answer.

So if Docker completely ignores UFW rules, how am I supposed to protect my VPS ? I’ve never done this before and I’m puzzled.

As for NPM, here’s the “ports” part of my docker-compose

    ports:
      - '80:80'
      - '81:81' #GUI
      - '443:443'

I have developped this myself

https://github.com/tiritibambix/ImaGUIck

It’s a lot friendlier with a link :)

https://github.com/sharevb/it-tools

I talked about it here last year

I mean yes, that seems obvious now that I’ve learned this.

But I wish I read this comment 3 years ago when I was starting to dive into self hosting. Would have saved me a bunch of time. So always assume some piece of knowledge is not obvious for someone out there and share ᕕ( ᐛ )ᕗ