Use bitcoind data volume, don't expost ES ports publicly, ufw eth1 btc port expose