Since some of the exposed ports are not used, it's a better approach to keep them inside internal Docker network.