Add NO_PUBLIC_PORTS flag to disable port forwarding