I'm not too familiar with Docker - how is it handling these ports? Is manhole port exposed to internet by default, or there is an another "port mapping" step that makes this port available only for localhost?