rules such that inter-docker container communication still works
extra docs