There are good reasons to expose a port of a docker container only to the localhost of the host machine. Security reasons or the use of a reverse proxy are only 2 of them (please don't ask for more). And it is fairly easy. It is a simple modification to the argument of the -p flag while when running podman run: podman run -d -p 8080:80/tcp docker.io/library/httpd From the manual: -p, --publish strings Publish a container's port, or a range of ports, to the host (default []) This is a quick ex...