diff --git a/docs/REVERSE_PROXY.md b/docs/REVERSE_PROXY.md index 5a5a77f2..6a0b0f9a 100755 --- a/docs/REVERSE_PROXY.md +++ b/docs/REVERSE_PROXY.md @@ -1066,7 +1066,11 @@ NoNewPrivileges=true ### Firewall Setup Depending on which GNU/Linux Distribution you are running, it might be required to open up some Firewall Ports in order to be able to access the Endpoints from outside the Host itself. -This is for instance the Case for Fedora Linux. +This is for instance the Case for Fedora Linux, where I had to open: +- Port 20212 for external GraphQL Access (both TCP & UDP are open, unsure if UDP is required) +- Port 9443 for external Authentik Outpost Proxy Access (both TCP & UDP are open, unsure if UDP is required) + +![Fedora Firewall Configuration](./img/REVERSE_PROXY/fedora-firewall.png) ### Authentik Setup In order to enable Single Sign On (SSO) with Authentik, you will need to create a Provider, an Application and an Outpost. diff --git a/docs/img/REVERSE_PROXY/fedora-firewall.png b/docs/img/REVERSE_PROXY/fedora-firewall.png new file mode 100644 index 00000000..49c51ffa Binary files /dev/null and b/docs/img/REVERSE_PROXY/fedora-firewall.png differ