The container method used should be whatever you are more familiar with or prefer. They both have their own quirks, pros, & cons.
SELinux - If you don’t want to deal with SELinux then set it to permissive mode. If you want to keep in enforcing mode you need to create the appropriate policies, …redhat.com/…/configuring-selinux-for-application…
Firewall - If you don’t want it’s protection then look up instructions to stop & disable it on your distro.
Port forwarding - From linux container side you either need to specify host networking or the ports you want to allow through, there is no avoiding that if it needs to be network accessible. If you want it internet accessible then you need to setup port forwarding on your router.
Have you looked into something like yunohost? It may be the kind of thing you’re looking for.