Docker is running behind nginx.

Public traffic reaches host nginx first, then nginx proxies it to this Docker container on 127.0.0.1:8080.