On pfsense under System/AdvancedFirewall & NAT try setting “Enable automatic outbound NAT for Reflection” to true and “NAT Reflection mode for port forwards " to NAT+ proxy”. I not sure if you need the second one.
I’m using hassio on ubuntu 18.04. with this setup I needed to also add to {“dns”: [“192.168.20.1”, “192.168.1.1”]} to /etc/docker/daemon.json. This will allow HA to resolve local dns hosts.