Finnicely

I have a few docker containers running on my unraid. many of them with web interfaces. i now wanted to put all these containers in their own docker network and only make nginx manager lan accessible via which all these containers can then be reached. i have created my own "dockernet" for this and now i see that these ports are still simply bridged into my lan. but i don't want that at all. how can i configure the containers appropriately? how can i configure the nginx container so that it can reach everything in this dockernet as well as from the lan?

Ich habe ein paar docker container die auf meinem unraid laufen. viele davon mit webinterfaces. ich wollte jetzt alle diese container in ein eigenes docker netzwerk packen und nur noch nginx m lan zugängig machen über welche dann all diese container erreicht werden können. ich habe dafür ein eigenes "dockernet" erstellt und sehe nun das diese ports trotzdem einfach in mein lan gebridged werden. das möchte ich aber gar nicht. wie kann ich die container passend konfigurieren? wie kann ich den nginx container so konfigurieren das er sowohl in diesem dockernet alles erreicht als auch vom lan aus erreichbar ist?

I'm pretty much stumped with my config. Maybe someone here can help me. Specs: Intel Core i3-12100 2x 8GB Kingston FURY Single Rank DDR4-2400 DIMM CL15 Gigabyte H610M S2H V2 DDR4 with newest BIOS 2x Crucial BX500 240GB (Cache) 1 x 16TB Seagate Exos X16 (Parity) 1 x 8TB WD Red (Array) 2x Xilence XPF80.W Powered by a 200W picoPSU with a 150W Power Brick. Only 2 devices are plugge in via USB. The Boot Drive and the UPS. I activated RC6. ErP Mode and set the C-States to C10 as well as deactivating Turbo and a bunch of onboard devices i don't need (SerialPorts, GNA for example) I have no devices reporting that ASPM is disabled. Powertop says everything is "good" yet i can't get lower than C3 on the Pkg(HW). What else can i do? Any ideas?