Linode / Akamai Docker Firewall Setup

Docker containers bypass UFW by default on Linode / Akamai servers. The fix: bind container ports to 127.0.0.1 and use DOCKER-USER chain rules.