I should be able to proxy the service behind a vpn using gluetun and still pass through the port (8000 in this case) to the local network. This works because the mcpo service should bind to that port ...

Recent changes in the CLI enforce binding local development servers to localhost for security reasons. While this is a sensible default, it causes issues in containerized environments like Docker.