The docker-ce role sets the firewall poilcy for an entire host

The docker-ce role sets the firewall default policy for an entire host.

It should only add rules relevant to its self and not set the global policy. The global policy should be left to the user.