fix(firewall): allow connections from docker containers