does the 1883 port have to be exposed publicly? By default it looks like the contained install opens/exposes many ports to the host and docker adds the iptables rules to allow forwarding.
According to the doc, only 80,443,51821-518XX/udp have to be publicly exposed. Is it still accurate or did something change with the latest versions?