Do not expose public port
Use sys link in dockerfile for app
Merge branch 'dev'

Dockerfile updates