The database was configured to listen to everything (just configured to ‘*’ in postgres.conf) and then I was leaning on the pg_hba.conf to limit what incoming connections it would accept, but none of the connection attempts were arriving at the database; my best guess is that Docker’s IPChains configuration was blocking the traffic, but I couldn’t see how to configure that.