I disabled access to the VM's public IP from the host. I may eventually need to completely disable the network stack for the containers in the future.