Docker-compose not working about unbound-docker HOT 6 CLOSED

root@piholeVM:/home/klittle# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy DROP)
target     prot opt source               destination
DOCKER-USER  all  --  anywhere             anywhere
DOCKER-ISOLATION-STAGE-1  all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED
DOCKER     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain DOCKER (1 references)
target     prot opt source               destination
ACCEPT     tcp  --  anywhere             172.17.0.2           tcp dpt:5335
ACCEPT     udp  --  anywhere             172.17.0.2           udp dpt:5335

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
target     prot opt source               destination
DOCKER-ISOLATION-STAGE-2  all  --  anywhere             anywhere
RETURN     all  --  anywhere             anywhere

Chain DOCKER-ISOLATION-STAGE-2 (1 references)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere
RETURN     all  --  anywhere             anywhere

Chain DOCKER-USER (1 references)
target     prot opt source               destination
RETURN     all  --  anywhere             anywhere
root@piholeVM:/home/klittle# ufw status
Status: inactive
root@piholeVM:/home/klittle# cat unbound/unbound.conf
include: "/usr/local/unbound/conf.d/*.conf"
include: "/usr/local/unbound/zones.d/*.conf"

server:
        module-config: "validator iterator"
        username: "_unbound"
    directory: "/usr/local/unbound"
        chroot: "/usr/local/unbound"
        do-daemonize: no
        tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt
root@piholeVM:/home/klittle#

...
# Indentations may not be correct 
networks:
  dns-network:
    driver: bridge
    driver_opts:
      parent: ent3
    ipam:
      config:
        - subnet: 172.20.0.0/16 #try this instead of /24
        gateway: 172.20.0.1

...
  unbound:
    container_name: unbound
    image: madnuttah/unbound:latest
    hostname: unbound
    domainname: solingen.local
    ports:
      - 5335:5335/tcp
      - 5335:5335/udp
    networks:
      dns-network:
        ipv4_address: 172.20.0.3
...

    docker run -d \
      --name unbound \
      --hostname unbound \
      --domainname solingen.local \
      --network host \
      --env TZ=Europe/London \
      --env ServerIP=192.168.100.211 \
      --env VIRTUAL_HOST=unbound_vm.solingen.local \
      -v /home/klittle/unbound/unbound.conf:/usr/local/unbound/unbound.conf:rw \
      -v /home/klittle/unbound/conf.d/:/usr/local/unbound/conf.d/:rw \
      -v /home/klittle/unbound/iana.d/:/usr/local/unbound/iana.d/:rw \
      -v /home/klittle/unbound/log.d/unbound.log:/usr/local/unbound/log.d/unbound.log:rw \
      -v /home/klittle/unbound/zones.d/:/usr/local/unbound/zones.d/:rw \
      --restart unless-stopped \
      madnuttah/unbound:latest

server:	
    do-not-query-localhost: no
	
    unblock-lan-zones: no
    insecure-lan-zones: yes
	
    private-domain: "solingen.local."
    private-domain: "100.168.192.in-addr.arpa."
	
    domain-insecure: "solingen.local."
    domain-insecure: "100.168.192.in-addr.arpa."
    private-address: 10.0.0.0/8
    private-address: 172.16.0.0/12
    private-address: 192.168.0.0/16
    private-address: 169.254.0.0/16
    private-address: fd00::/8
    private-address: fe80::/10
    private-address: ::ffff:0:0/96
	
    hide-identity: yes
    identity: "server"
    hide-version: yes
    version: ""    
    aggressive-nsec: yes
    qname-minimisation: yes
    qname-minimisation-strict: no	
    disable-dnssec-lame-check: no
    hide-trustanchor: yes
    harden-algo-downgrade: yes
    harden-below-nxdomain: yes
    harden-dnssec-stripped: yes
    harden-glue: yes
    harden-large-queries: yes
    harden-referral-path: yes
    harden-short-bufsize: yes
    minimal-responses: yes
    deny-any: yes
    use-caps-for-id: yes
    val-clean-additional: yes
    val-max-restart: 5
    root-key-sentinel: yes
    zonemd-permissive-mode: no