How would you answer an interview scenario involving Docker networking?

Design networking for a frontend, API, and database where only the frontend or reverse proxy should be reachable from outside the host.