security update

made dokku containers only available on loopback to prevent direct access from external interfaces. All traffic can therefore only go via the nginx proxy