Use `expose` vs `ports` to only expose the port internally

The admin interface was exposed to the world, so I've modified the docker-compose.yml to ensure 12765 is only exposed internally between other lorry containers.