Data outlives the container, the port goes through the firewall

Named volume versus host mount, what prune actually deletes, and the published port ufw status cannot see.