3/ Traefik also forwards requests, and again, in a docker container on a bridged network, it forwards the requests to containers through the docker NAT (which makes perfect sense)
So the solution required resolving each of these problems, first by exposing the ports Traefik connects to on the host interface. More info here: https://docs.docker.com/compose/compose-file/05-services/#long-syntax-3