Close host-published ports that don't need to be reachable from outside the docker network: nginx already proxies backend/livekit by service name, and admin UIs (prometheus/grafana) and llm servers should only be reachable via SSH tunnel. Only 80/443/7881 + the WebRTC UDP range stay open to the internet.