Because musicbrainz-docker can be used to replicate only the database, it is not always needed to publish the port 5000 of the MusicBrainz server.

Publishing a port has security implications, so it is sometimes even needed to not publish it.

It is not possible to unpublish a port using an override compose file, so the only way is not to publish the port by default and have an override compose file to publish the port 5000.

This will be a breaking change for people currently using their port 5000, but handling it should be straightforward:

admin/configure add publish-mb-website
sudo docker-compose up -d