Docker bypasses your firewall silently, and most home labs don't realize it
…Sometimes there's a Tailscale or WireGuard tunnel in the picture, and the user assumes the VPN is gating access when really the LAN-side exposure was open the whole time. That…