Yes, but I'll note the /ip/reverse-proxy can hide the port for you, since you just use a different DNS name that has the references the internet port/container IP to forward. Food for thought. Now it's FQDN name is often less friendly, but a DNS suffix in DHCP might solve it so it's just hostname resolved)
That only work with HTTP/S... so does not work all the time, in all case. And do hear on you the "just know the IP" part here, as too do get confused on port stuff is on sometimes too - why I'm not say it's "bad" to bridge a VETH, but it is a choice that folks should consider since it's not some clear-cut "always bridge VETH". You have needs, understand what you're doing, etc. is a different story than what the "generic advice" should be 