three firewalls deep on a new container host and port 8080 is still closed

im literally losing my mind here ive been at this for hours :D a new container host, app running, logs say its listening on port 8080, but every outside request gets refused.

This site can't be reached
Check if there is a typo in my-shop-site.example.
If spelling is correct, try running Windows Network Diagnostics.
DNS_PROBE_FINISHED_NXDOMAIN

theres the OS firewall, teh providers network firewall, and my router (or whatever is in between), and Im not suree which one I forgot. id love a step-by-step way to check each layer without guessing... detailed steps welcome, I realy want to understand each layer this time. thx in advance!!