On: Docker overrides UFW rules

[GuestFAUniverse]

Good: Firewalld and docker play well together

Better: Forget docker, use podman Bonus with podman: not dependent on newer Portainer releases with nag screens, because Cockpit does the job