the current docker-compose configuration exposes ports to the host unnecessarily