expose docker via TCP