diff --git a/charts/incubator/technitium/Chart.yaml b/charts/incubator/technitium/Chart.yaml new file mode 100644 index 00000000000..12094ea91a9 --- /dev/null +++ b/charts/incubator/technitium/Chart.yaml @@ -0,0 +1,29 @@ +apiVersion: v2 +appVersion: "2022.02.1" +dependencies: +- name: common + repository: https://library-charts.truecharts.org + version: 9.1.15 +deprecated: false +description: Technitium DNS Server is an open source authoritative as well as recursive DNS server that can be used for self hosting a DNS server for privacy & security. +home: https://github.com/truecharts/apps/tree/master/charts/stable/technitium +icon: https://truecharts.org/_static/img/appicons/technitium.png +keywords: +- DNS +kubeVersion: '>=1.16.0-0' +maintainers: +- email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org +name: technitium +sources: +- https://github.com/TechnitiumSoftware/DnsServer +- https://technitium.com/ +- https://hub.docker.com/r/technitium/dns-server +type: application +version: 0.0.1 +annotations: + truecharts.org/catagories: | + - networking + truecharts.org/SCALE-support: "true" + truecharts.org/grade: U diff --git a/charts/incubator/technitium/questions.yaml b/charts/incubator/technitium/questions.yaml new file mode 100644 index 00000000000..9c5308029a7 --- /dev/null +++ b/charts/incubator/technitium/questions.yaml @@ -0,0 +1,767 @@ +# Include{groups} +portals: + open: + protocols: + - "$kubernetes-resource_configmap_portal_protocol" + host: + - "$kubernetes-resource_configmap_portal_host" + ports: + - "$kubernetes-resource_configmap_portal_port" + path: "/" + admin: + protocols: + - "$kubernetes-resource_configmap_portal_protocol" + host: + - "$kubernetes-resource_configmap_portal_host" + ports: + - "$kubernetes-resource_configmap_portal_port" + path: "/admin/" +questions: + - variable: portal + group: "Container Image" + label: "Configure Portal Button" + schema: + type: dict + hidden: true + attrs: + - variable: enabled + label: "Enable" + description: "enable the portal button" + schema: + hidden: true + editable: false + type: boolean + default: true +# Include{global} + - variable: controller + group: "Controller" + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: advanced + label: "Show Advanced Controller Settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: type + description: "Please specify type of workload to deploy" + label: "(Advanced) Controller Type" + schema: + type: string + default: "deployment" + required: true + enum: + - value: "deployment" + description: "Deployment" + - value: "statefulset" + description: "Statefulset" + - value: "daemonset" + description: "Daemonset" + - variable: replicas + description: "Number of desired pod replicas" + label: "Desired Replicas" + schema: + type: int + default: 1 + required: true + - variable: strategy + description: "Please specify type of workload to deploy" + label: "(Advanced) Update Strategy" + schema: + type: string + default: "Recreate" + required: true + enum: + - value: "Recreate" + description: "Recreate: Kill existing pods before creating new ones" + - value: "RollingUpdate" + description: "RollingUpdate: Create new pods and then kill old ones" + - value: "OnDelete" + description: "(Legacy) OnDelete: ignore .spec.template changes" +# Include{controllerExpert} + - variable: secret + group: "Container Configuration" + label: "Image Secrets" + schema: + additional_attrs: true + type: dict + attrs: + - variable: DNS_SERVER_ADMIN_PASSWORD + label: "DNS_SERVER_ADMIN_PASSWORD" + description: "DNS web console admin user password." + schema: + type: string + default: "" + private: true + required: true + - variable: env + group: "Container Configuration" + label: "Image Environment" + schema: + additional_attrs: true + type: dict + attrs: + - variable: DNS_SERVER_DOMAIN + label: "DNS_SERVER_DOMAIN" + description: "The primary domain name used by this DNS Server to identify itself." + schema: + type: string + default: "dns-server" + required: true + - variable: DNS_SERVER_PREFER_IPV6 + label: "DNS_SERVER_PREFER_IPV6" + description: "DNS Server will use IPv6 for querying whenever possible with this option enabled." + schema: + type: boolean + default: false + - variable: DNS_SERVER_OPTIONAL_PROTOCOL_DNS_OVER_HTTP + label: "DNS_SERVER_OPTIONAL_PROTOCOL_DNS_OVER_HTTP" + description: "Enables DNS server optional protocol DNS-over-HTTP on TCP port 8053 to be used with a TLS terminating reverse proxy like nginx." + schema: + type: boolean + default: false + - variable: DNS_SERVER_RECURSION + label: "DNS_SERVER_RECURSION" + schema: + type: string + default: "AllowOnlyForPrivateNetworks" + enum: + - value: "AllowOnlyForPrivateNetworks" + description: "AllowOnlyForPrivateNetworks" + - value: "UseSpecifiedNetworks" + description: "UseSpecifiedNetworks" + - value: "Allow" + description: "Allow" + - value: "Deny" + description: "Deny" + - variable: DNS_SERVER_RECURSION_DENIED_NETWORKS + label: "DNS_SERVER_RECURSION_DENIED_NETWORKS" + description: "Comma separated list of IP addresses or network addresses to deny recursion. Valid only for UseSpecifiedNetworks recursion option." + schema: + show_if: [["DNS_SERVER_RECURSION", "=", "UseSpecifiedNetworks"]] + type: string + default: "1.1.1.0/24" + - variable: DNS_SERVER_RECURSION_ALLOWED_NETWORKS + label: "DNS_SERVER_RECURSION_ALLOWED_NETWORKS" + description: "Comma separated list of IP addresses or network addresses to allow recursion. Valid only for `UseSpecifiedNetworks` recursion option." + schema: + show_if: [["DNS_SERVER_RECURSION", "=", "UseSpecifiedNetworks"]] + type: string + default: "127.0.0.1, 192.168.1.0/24" + - variable: DNS_SERVER_ENABLE_BLOCKING + label: "DNS_SERVER_ENABLE_BLOCKING" + description: "Sets the DNS server to block domain names using Blocked Zone and Block List Zone." + schema: + type: boolean + default: false + - variable: DNS_SERVER_ALLOW_TXT_BLOCKING_REPORT + label: "DNS_SERVER_ALLOW_TXT_BLOCKING_REPORT" + description: "Specifies if the DNS Server should respond with TXT records containing a blocked domain report for TXT type requests." + schema: + type: boolean + default: false + - variable: DNS_SERVER_FORWARDERS + label: "DNS_SERVER_FORWARDERS" + description: "Comma separated list of forwarder addresses." + schema: + type: string + default: "1.1.1.1, 8.8.8.8" + - variable: DNS_SERVER_FORWARDER_PROTOCOL + label: "DNS_SERVER_FORWARDER_PROTOCOL" + description: "Forwarder protocol options: Udp, Tcp, Tls, Https, HttpsJson." + schema: + type: string + default: "Tcp" + enum: + - value: "AllowOnlyForPrivateNetworks" + description: "AllowOnlyForPrivateNetworks" + - value: "Udp" + description: "Udp" + - value: "Tcp" + description: "Tcp" + - value: "Tls" + description: "Tls" + - value: "Https" + description: "Https" + - value: "HttpsJson" + description: "HttpsJson" +# Include{containerConfig} + + - variable: service + group: "Networking and Services" + label: "Configure Service(s)" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "Main Service" + description: "The Primary service on which the healthcheck runs, often the webUI" + schema: + additional_attrs: true + type: dict + attrs: +# Include{serviceSelector} + - variable: main + label: "Main Service Port Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: "Port" + description: "This port exposes the container port on the service" + schema: + type: int + default: 5380 + required: true + - variable: advanced + label: "Show Advanced settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: protocol + label: "Port Type" + schema: + type: string + default: "HTTP" + enum: + - value: HTTP + description: "HTTP" + - value: "HTTPS" + description: "HTTPS" + - value: TCP + description: "TCP" + - value: "UDP" + description: "UDP" + - variable: nodePort + label: "Node Port (Optional)" + description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer" + schema: + type: int + min: 9000 + max: 65535 + - variable: targetPort + label: "Target Port" + description: "The internal(!) port on the container the Application runs on" + schema: + type: int + default: 5380 + + - variable: dns-udp + label: "DNS-UDP Service" + description: "DNS-UDP Service" + schema: + additional_attrs: true + type: dict + attrs: +# Include{serviceSelector} + - variable: dns-udp + label: "DNS-UDP Service Port Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: "Port" + description: "This port exposes the container port on the service" + schema: + type: int + default: 53 + required: true + - variable: advanced + label: "Show Advanced settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: protocol + label: "Port Type" + schema: + type: string + default: "UDP" + enum: + - value: HTTP + description: "HTTP" + - value: "HTTPS" + description: "HTTPS" + - value: TCP + description: "TCP" + - value: "UDP" + description: "UDP" + - variable: nodePort + label: "Node Port (Optional)" + description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer" + schema: + type: int + min: 9000 + max: 65535 + - variable: targetPort + label: "Target Port" + description: "The internal(!) port on the container the Application runs on" + schema: + type: int + default: 53 + + - variable: dns-tcp + label: "DNS-TCP Service" + description: "DNS-TCP Service" + schema: + additional_attrs: true + type: dict + attrs: +# Include{serviceSelector} + - variable: dns-tcp + label: "DNS-TCP Service Port Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: "Port" + description: "This port exposes the container port on the service" + schema: + type: int + default: 53 + required: true + - variable: advanced + label: "Show Advanced settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: protocol + label: "Port Type" + schema: + type: string + default: "TCP" + enum: + - value: HTTP + description: "HTTP" + - value: "HTTPS" + description: "HTTPS" + - value: TCP + description: "TCP" + - value: "UDP" + description: "UDP" + - variable: nodePort + label: "Node Port (Optional)" + description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer" + schema: + type: int + min: 9000 + max: 65535 + - variable: targetPort + label: "Target Port" + description: "The internal(!) port on the container the Application runs on" + schema: + type: int + default: 53 + + - variable: dns-tls + label: "DNS-TLS Service" + description: "DNS-TLS Service" + schema: + additional_attrs: true + type: dict + attrs: +# Include{serviceSelector} + - variable: dns-tls + label: "DNS-TLS Service Port Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: "Port" + description: "This port exposes the container port on the service" + schema: + type: int + default: 853 + required: true + - variable: advanced + label: "Show Advanced settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: protocol + label: "Port Type" + schema: + type: string + default: "TCP" + enum: + - value: HTTP + description: "HTTP" + - value: "HTTPS" + description: "HTTPS" + - value: TCP + description: "TCP" + - value: "UDP" + description: "UDP" + - variable: nodePort + label: "Node Port (Optional)" + description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer" + schema: + type: int + min: 9000 + max: 65535 + - variable: targetPort + label: "Target Port" + description: "The internal(!) port on the container the Application runs on" + schema: + type: int + default: 853 + - variable: dns-cert + label: "DNS-over-HTTPS Certbot Service" + description: "DNS-over-HTTPS Certbot Service" + schema: + additional_attrs: true + type: dict + attrs: +# Include{serviceSelector} + - variable: dns-cert + label: "DNS-over-HTTPS Certbot Service Port Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: "Port" + description: "This port exposes the container port on the service" + schema: + type: int + default: 10202 + required: true + - variable: advanced + label: "Show Advanced settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: protocol + label: "Port Type" + schema: + type: string + default: "TCP" + enum: + - value: HTTP + description: "HTTP" + - value: "HTTPS" + description: "HTTPS" + - value: TCP + description: "TCP" + - value: "UDP" + description: "UDP" + - variable: nodePort + label: "Node Port (Optional)" + description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer" + schema: + type: int + min: 9000 + max: 65535 + - variable: targetPort + label: "Target Port" + description: "The internal(!) port on the container the Application runs on" + schema: + type: int + default: 80 + - variable: dns-https + label: "DNS-over-HTTPS Service" + description: "DNS-over-HTTPS Service" + schema: + additional_attrs: true + type: dict + attrs: +# Include{serviceSelector} + - variable: dns-https + label: "DNS-over-HTTPS Service Port Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: "Port" + description: "This port exposes the container port on the service" + schema: + type: int + default: 10203 + required: true + - variable: advanced + label: "Show Advanced settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: protocol + label: "Port Type" + schema: + type: string + default: "TCP" + enum: + - value: HTTP + description: "HTTP" + - value: "HTTPS" + description: "HTTPS" + - value: TCP + description: "TCP" + - value: "UDP" + description: "UDP" + - variable: nodePort + label: "Node Port (Optional)" + description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer" + schema: + type: int + min: 9000 + max: 65535 + - variable: targetPort + label: "Target Port" + description: "The internal(!) port on the container the Application runs on" + schema: + type: int + default: 443 + - variable: dns-https-proxy + label: "DNS-over-HTTPS Reverse Proxy Service" + description: "DNS-over-HTTPS Reverse Proxy Service" + schema: + additional_attrs: true + type: dict + attrs: +# Include{serviceSelector} + - variable: dns-https-proxy + label: "DNS-over-HTTPS Reverse Proxy Service Port Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: "Port" + description: "This port exposes the container port on the service" + schema: + type: int + default: 10204 + required: true + - variable: advanced + label: "Show Advanced settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: protocol + label: "Port Type" + schema: + type: string + default: "TCP" + enum: + - value: HTTP + description: "HTTP" + - value: "HTTPS" + description: "HTTPS" + - value: TCP + description: "TCP" + - value: "UDP" + description: "UDP" + - variable: nodePort + label: "Node Port (Optional)" + description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer" + schema: + type: int + min: 9000 + max: 65535 + - variable: targetPort + label: "Target Port" + description: "The internal(!) port on the container the Application runs on" + schema: + type: int + default: 8053 + - variable: serviceexpert + group: "Networking and Services" + label: "Show Expert Config" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: hostNetwork + group: "Networking and Services" + label: "Host-Networking (Complicated)" + schema: + type: boolean + default: false + +# Include{serviceExpert} + +# Include{serviceList} + + - variable: persistence + label: "Integrated Persistent Storage" + description: "Integrated Persistent Storage" + group: "Storage and Persistence" + schema: + additional_attrs: true + type: dict + attrs: + - variable: config + label: "App Config Storage" + description: "Stores the Application Configuration." + schema: + additional_attrs: true + type: dict + attrs: + - variable: type + label: "Type of Storage" + description: "Sets the persistence type, Anything other than PVC could break rollback!" + schema: + type: string + default: "simplePVC" + enum: + - value: "simplePVC" + description: "PVC (simple)" + - value: "simpleHP" + description: "HostPath (simple)" + - value: "emptyDir" + description: "emptyDir" + - value: "pvc" + description: "pvc" + - value: "hostPath" + description: "hostPath" +# Include{persistenceBasic} + - variable: hostPath + label: "hostPath" + description: "Path inside the container the storage is mounted" + schema: + show_if: [["type", "=", "hostPath"]] + type: hostpath + - variable: medium + label: "EmptyDir Medium" + schema: + show_if: [["type", "=", "emptyDir"]] + type: string + default: "" + enum: + - value: "" + description: "Default" + - value: "Memory" + description: "Memory" +# Include{persistenceAdvanced} + +# Include{persistenceList} + + - variable: ingress + label: "" + group: "Ingress" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "Main Ingress" + schema: + additional_attrs: true + type: dict + attrs: +# Include{ingressDefault} + +# Include{ingressTLS} + +# Include{ingressTraefik} + +# Include{ingressExpert} + - variable: dns-https-proxy + label: "DNS-over-HTTPS Reverse Proxy" + schema: + additional_attrs: true + type: dict + attrs: +# Include{ingressDefault} + +# Include{ingressTLS} + +# Include{ingressTraefik} + +# Include{ingressExpert} + +# Include{ingressList} + +# Include{security} + + - variable: advancedSecurity + label: "Show Advanced Security Settings" + group: "Security and Permissions" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: securityContext + label: "Security Context" + schema: + additional_attrs: true + type: dict + attrs: + - variable: privileged + label: "Privileged mode" + schema: + type: boolean + default: false + - variable: readOnlyRootFilesystem + label: "ReadOnly Root Filesystem" + schema: + type: boolean + default: false + - variable: allowPrivilegeEscalation + label: "Allow Privilege Escalation" + schema: + type: boolean + default: true + - variable: runAsNonRoot + label: "runAsNonRoot" + schema: + type: boolean + default: false +# Include{securityContextAdvanced} + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + additional_attrs: true + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 +# Include{podSecurityContextAdvanced} + +# Include{resources} + +# Include{advanced} + +# Include{addons} diff --git a/charts/incubator/technitium/templates/common.yaml b/charts/incubator/technitium/templates/common.yaml new file mode 100644 index 00000000000..a17e923ef88 --- /dev/null +++ b/charts/incubator/technitium/templates/common.yaml @@ -0,0 +1 @@ +{{- include "common.all" . }} diff --git a/charts/incubator/technitium/values.yaml b/charts/incubator/technitium/values.yaml new file mode 100644 index 00000000000..340e2200bc5 --- /dev/null +++ b/charts/incubator/technitium/values.yaml @@ -0,0 +1,94 @@ +image: + repository: technitium/dns-server + pullPolicy: IfNotPresent + tag: 8.0@sha256:37edc3d3cc4521559f5738d5152926750a498294ccef9fe264369746be87febc + +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + allowPrivilegeEscalation: true + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + +secret: + DNS_SERVER_ADMIN_PASSWORD: "password" + +env: + DNS_SERVER_DOMAIN: "dns-server" + DNS_SERVER_PREFER_IPV6: false + DNS_SERVER_OPTIONAL_PROTOCOL_DNS_OVER_HTTP: false + DNS_SERVER_RECURSION: "AllowOnlyForPrivateNetworks" + DNS_SERVER_RECURSION_DENIED_NETWORKS: "1.1.1.0/24" + DNS_SERVER_RECURSION_ALLOWED_NETWORKS: "127.0.0.1, 192.168.1.0/24" + DNS_SERVER_ENABLE_BLOCKING: false + DNS_SERVER_ALLOW_TXT_BLOCKING_REPORT: false + DNS_SERVER_FORWARDERS: "1.1.1.1, 8.8.8.8" + DNS_SERVER_FORWARDER_PROTOCOL: "Tcp" + +service: + main: + ports: + main: + port: 5380 + targetPort: 5380 + dns-tcp: + enabled: true + ports: + dns-tcp: + enabled: true + port: 53 + targetPort: 53 + dns-udp: + enabled: true + ports: + dns-udp: + enabled: true + protocol: UDP + port: 53 + targetPort: 53 + dns-tls: + enabled: true + ports: + dns-tls: + enabled: true + protocol: TCP + port: 853 + targetPort: 853 + dns-cert: + enabled: true + ports: + dns-cert: + enabled: true + protocol: TCP + port: 10202 + targetPort: 80 + dns-https: + enabled: true + ports: + dns-https: + enabled: true + protocol: TCP + port: 10203 + targetPort: 443 + dns-https-proxy: + enabled: true + ports: + dns-https-proxy: + enabled: true + protocol: TCP + port: 10204 + targetPort: 8053 + + +# Not sure if those will work on k8s + # - "443:443/tcp" #DNS-over-HTTPS service + # - "80:80/tcp" #DNS-over-HTTPS service certbot certificate renewal +# Note sure if this will work with traefik + # - "8053:8053/tcp" #DNS-over-HTTPS using reverse proxy + +persistence: + config: + enabled: true + mountPath: "/etc/dns/config" diff --git a/docs/_static/img/appicons/technitium.png b/docs/_static/img/appicons/technitium.png new file mode 100644 index 00000000000..5c14e4fa848 Binary files /dev/null and b/docs/_static/img/appicons/technitium.png differ diff --git a/docs/manual/default-ports.md b/docs/manual/default-ports.md index a3c81e3325a..dc191fddd39 100644 --- a/docs/manual/default-ports.md +++ b/docs/manual/default-ports.md @@ -20,398 +20,405 @@ These defaults can of course be changed, but as we guarantee "sane, working defa ## Stable, Games and Incubator Apps -| App | Service | Port Name | Port | Protocol | Note | -| :------------------------- | :-------------: | :-------------: | :---: | :------: | :-------------------------------------: | -| amcrest2mqtt | main | main | - | - | Service disabled | -| leaf2mqtt | main | main | - | - | Service disabled | -| promcord | main | main | - | - | Service disabled | -| protonmail-bridge | main | main | - | - | Service disabled | -| speedtest-exporter | main | main | - | - | Service disabled | -| unpackerr | main | main | - | - | Service disabled | -| unpoller | main | main | - | - | Service disabled | -| uptimerobot-prometheus | main | main | - | - | Service disabled | -| ddclient | main | main | - | - | Service disabled | -| duckdns | main | main | - | - | Service disabled | -| webgrabplus | main | main | - | - | Service disabled | -| rsnapshot | main | main | - | - | Service disabled | -| protonmail-bridge | smtp | smtp | 25 | TCP | Potential conflict with other smtp apps | -| anonaddy | smtp | smtp | 25 | TCP | Potential conflict with other smtp apps | -| pihole | dns-tcp | dns-tcp | 53 | TCP | Potential conflict with k8s-gateway | -| pihole | dns | dns | 53 | UDP | Potential conflict with k8s-gateway | -| openldap | main | main | 389 | TCP | | -| minisatip | rtsp | rtsp | 554 | TCP | | -| openldap | ldaps | ldaps | 636 | TCP | | -| strapi | main | main | 1337 | TCP | | -| domoticz | comm2 | comm2 | 1443 | TCP | | -| nntp2nntp | main | main | 1563 | TCP | | -| kms | main | main | 1688 | TCP | | -| freeradius | main | main | 1812 | UDP | | -| freeradius | accounting | accounting | 1813 | UDP | | -| node-red | main | main | 1880 | TCP | | -| mosquitto | main | main | 1883 | TCP | | -| minisatip | discovery | discovery | 1900 | UDP | | -| owncast | rtmp | rtmp | 1935 | TCP | Potential conflict with frigate | -| frigate | rtmp | rtmp | 1935 | TCP | Potential conflict with owncast | -| ubooquity | main | main | 2202 | TCP | | -| ubooquity | admin | admin | 2203 | TCP | | -| gitea | ssh | ssh | 2222 | TCP | | -| photoprism | main | main | 2342 | TCP | | -| docker-compose | main | main | 2376 | HTTPS | | -| valheim | valheim | valheim-1 | 2456 | UDP | | -| valheim | valheim | valheim-2 | 2457 | UDP | | -| valheim | valheim | valheim-3 | 2458 | UDP | | -| sqlitebrowser | main | main | 3000 | TCP | | -| uptime-kuma | main | main | 3001 | TCP | | -| vaultwarden | ws | ws | 3012 | TCP | | -| loki | main | main | 3100 | HTTP | | -| jdownloader2 | myjd | myjd | 3129 | TCP | | -| pylon | main | main | 3131 | TCP | | -| clamav | main | main | 3310 | TCP | | -| unifi | stun | mstunain | 3478 | UDP | Potential conflict with ispy-agent-dvr | -| ispy-agent-dvr | turn | turn | 3478 | UDP | Potential conflict with unifi | -| logitech-media-server | playertcp | slimprototcp | 3483 | TCP | | -| logitech-media-server | playerudp | slimprotoudp | 3483 | UDP | | -| ombi | main | main | 3579 | TCP | | -| ipfs | peer | peer | 4001 | TCP | | -| quassel-core | main | main | 4242 | TCP | | -| navidrome | main | main | 4533 | TCP | | -| requestrr | main | main | 4545 | TCP | | -| guacd | main | main | 4822 | TCP | | -| frigate | main | main | 5000 | TCP | | -| ipfs | api | api | 5001 | TCP | | -| appdaemon | main | main | 5050 | TCP | | -| overseer | main | main | 5055 | TCP | | -| nzbhydra | main | main | 5076 | TCP | | -| lazylibrarian | main | main | 5299 | TCP | | -| syslog-ng | syslog-udp | syslog-udp | 5514 | UDP | | -| n8n | main | main | 5678 | TCP | | -| esphome | main | main | 6052 | TCP | | -| novnc | main | main | 6080 | TCP | | -| domoticz | comm1 | comm1 | 6144 | TCP | | -| znc | main | main | 6501 | TCP | | -| syslog-ng | syslog-tls | syslog-tls | 6514 | TCP | | -| embystat | main | main | 6555 | TCP | | -| deemix | main | main | 6595 | TCP | | -| syslog-ng | main | main | 6601 | TCP | | -| ngircd | main | main | 6667 | TCP | | -| bazarr | main | main | 6767 | TCP | | -| unifi | speedtest | speedtest | 6789 | TCP | | -| aria2 | main | main | 6800 | TCP | | -| qbittorrent | torrent | torrent | 6881 | TCP | | -| qbittorrent | torrentudp | torrentudp | 6881 | UDP | | -| aria2 | listen | listen | 6888 | TCP | | -| logitech-media-server | main | main | 7000 | TCP | | -| clamav | milter | milter | 7357 | TCP | | -| foldingathome | main | main | 7396 | TCP | | -| satisfactory | main | main | 7777 | UDP | | -| haste-server | main | main | 7777 | TCP | | -| nextcloud | hpb | hpb | 7867 | TCP | | -| radarr | main | main | 7878 | TCP | | -| synapse | main | main | 8008 | TCP | | -| omada-controller | main | main | 8043 | TCP | | -| odoo | main | main | 8069 | TCP | | -| odoo | odoo | xmlrpcs | 8071 | TCP | | -| odoo | odoo | longpolling | 8072 | TCP | | -| unifi | comm | comm | 8080 | TCP | | -| calibre | webserver | webserver | 8081 | TCP | | -| traccar | main | main | 8082 | TCP | | -| calibre-web | main | main | 8083 | TCP | | -| calibre | main | main | 8084 | TCP | | -| htpcmanager | main | main | 8085 | TCP | | -| synclounge | main | main | 8088 | TCP | | -| mylar | main | main | 8090 | TCP | | -| zwavejs2mqtt | main | main | 8091 | TCP | | -| jellyfin | main | main | 8096 | TCP | | -| deluge | main | main | 8112 | TCP | | -| home-assistant | main | main | 8123 | TCP | | -| tautulli | main | main | 8181 | TCP | | -| flaresolverr | main | main | 8191 | TCP | | -| duplicati | main | main | 8200 | TCP | | -| tdarr | main | main | 8265 | TCP | | -| tdarr | comm | comm | 8266 | TCP | | -| tdarr-node | main | main | 8267 | TCP | | -| beets | main | main | 8337 | TCP | | -| syncthing | main | main | 8384 | TCP | | -| unifi | main | main | 8443 | HTTPS | | -| gaps | main | main | 8484 | TCP | | -| homebridge | main | main | 8581 | TCP | Might require Host Network | -| lidarr | main | main | 8686 | TCP | | -| readarr | main | main | 8787 | TCP | | -| omada-controller | userportal | websecure | 8843 | HTTPS | Potential conflict with unifi | -| unifi | guestportal | websecure | 8843 | HTTPS | Potential conflict with omada | -| minisatip | main | main | 8875 | TCP | | -| unifi | guestportal | web | 8880 | HTTP | | -| resilio-sync | main | main | 8888 | TCP | | -| sonarr | main | main | 8989 | TCP | | -| valheim | main | main | 9010 | TCP | | -| valheim | supervisor | supervisor | 9011 | TCP | | -| pihole | main | main | 9089 | TCP | | -| minio-console | main | main | 9090 | TCP | | -| authelia | main | main | 9091 | TCP | | -| synapse | replication | replication | 9092 | TCP | | -| synapse | metrics | metrics | 9093 | TCP | | -| jacket | main | main | 9117 | HTTP | | -| unpoller | main | metrics | 9130 | TCP | | -| owncloud-ocis | main | main | 9200 | TCP | | -| prowlarr | main | main | 9696 | TCP | | -| uptimerobot-prometheus | main | metrics | 9705 | TCP | | -| kodi-headless | esall | esall | 9777 | UDP | | -| speedtest-exporter | main | metrics | 9798 | TCP | | -| tvheadend | main | main | 9981 | TCP | | -| tvheadend | htsp | htsp | 9982 | TCP | | -| teamspeak3 | voice | voice | 9987 | UDP | | -| guacamole-client | main | main | 9998 | TCP | | -| stash | main | main | 9999 | TCP | | -| ser2sock | main | main | 10000 | TCP | | -| deconz | websocket | websocket | 10001 | TCP | | -| deconz | vnc | vnc | 10002 | TCP | | -| external-service | main | main | 10003 | HTTPS | | -| nullserv | main | main | 10004 | TCP | | -| nullserv | https | https | 10005 | TCP | | -| apache-musicindex | main | main | 10006 | TCP | | -| cryptofolio | main | main | 10007 | TCP | | -| deconz | main | main | 10008 | TCP | | -| dsmr-reader | main | main | 10009 | TCP | | -| freshrss | main | main | 10010 | TCP | | -| teamspeak3 | main | main | 10011 | TCP | | -| grav | main | main | 10012 | TCP | | -| grocy | main | main | 10013 | TCP | | -| heimdall | main | main | 10014 | TCP | | -| kanboard | main | main | 10015 | TCP | | -| librespeed | main | main | 10016 | TCP | | -| lychee | main | main | 10017 | TCP | | -| mealie | main | main | 10018 | TCP | | -| muximux | main | main | 10019 | TCP | | -| nextcloud | main | main | 10020 | TCP | | -| octoprint | main | main | 10021 | TCP | | -| organizr | main | main | 10022 | TCP | | -| gonic | main | main | 10023 | TCP | | -| pgadmin | main | main | 10024 | TCP | | -| photoshow | main | main | 10025 | TCP | | -| phpldapadmin | main | main | 10026 | TCP | | -| piwigo | main | main | 10027 | TCP | | -| pixapop | main | main | 10028 | TCP | | -| recipes | main | main | 10029 | TCP | | -| smokeping | main | main | 10030 | TCP | | -| truecommand | main | main | 10031 | TCP | | -| audacity | main | main | 10032 | TCP | | -| digikam | main | main | 10033 | TCP | | -| doublecommander | main | main | 10034 | TCP | | -| filezilla | main | main | 10035 | TCP | | -| flood | main | main | 10036 | TCP | | -| gitea | main | main | 10037 | TCP | | -| grafana | main | main | 10038 | HTTP | | -| icantbelieveitsnotvaletudo | main | main | 10039 | TCP | | -| littlelink | main | main | 10040 | TCP | | -| mstream | main | main | 10041 | TCP | | -| remmina | main | main | 10042 | TCP | | -| onlyoffice-document-server | main | main | 10043 | TCP | | -| wiki | main | main | 10044 | TCP | | -| wikijs | main | main | 10045 | TCP | | -| zwavejs2mqtt | ws | ws | 10046 | TCP | | -| airsonic | main | main | 10047 | TCP | | -| booksonic-air | main | main | 10048 | TCP | | -| deepstack | main | main | 10049 | TCP | | -| spotweb | main | main | 10050 | TCP | | -| firefox-syncserver | main | main | 10051 | TCP | | -| whoogle | main | main | 10052 | TCP | | -| handbrake | main | main | 10053 | TCP | | -| jdownloader2 | main | main | 10054 | TCP | | -| handbrake | vnc | vnc | 10055 | TCP | | -| jdownloader2 | vnc | vnc | 10056 | TCP | | -| nzbget | main | main | 10057 | TCP | | -| friendica | main | main | 10058 | TCP | | -| logitech-media-server | cli | cli | 10059 | TCP | | -| etherpad | main | main | 10060 | TCP | | -| thelounge | main | main | 10061 | TCP | | -| oscam | main | main | 10062 | TCP | | -| code-server | main | main | 10063 | TCP | | -| headphones | main | main | 10064 | TCP | | -| hyperion-ng | main | main | 10065 | TCP | | -| sickgear | main | main | 10066 | TCP | | -| sickchill | main | main | 10067 | TCP | | -| medusa | main | main | 10068 | TCP | | -| babybuddy | main | main | 10069 | TCP | | -| cloud9 | main | main | 10070 | TCP | | -| dizquetv | main | main | 10071 | TCP | | -| focalboard | main | main | 10072 | TCP | | -| golinks | main | main | 10073 | TCP | | -| healthchecks | main | main | 10074 | TCP | | -| pyload | main | main | 10075 | TCP | | -| shorturl | main | main | 10076 | TCP | | -| static | main | main | 10077 | TCP | | -| twtxt | main | main | 10078 | TCP | | -| emby | main | main | 10079 | TCP | | -| davos | main | main | 10081 | TCP | | -| fireflyiii | main | main | 10082 | TCP | | -| fossil | main | main | 10083 | TCP | | -| gotify | main | main | 10084 | TCP | | -| komga | main | main | 10085 | TCP | | -| owncast | main | main | 10088 | TCP | | -| openkm | main | main | 10090 | TCP | | -| miniflux | main | main | 10091 | TCP | | -| piaware | main | main | 10092 | TCP | | -| podgrab | main | main | 10093 | TCP | | -| pretend-youre-xyzzy | main | main | 10094 | TCP | | -| qbittorrent | main | main | 10095 | TCP | | -| reg | main | main | 10096 | TCP | | -| sabnzbd | main | main | 10097 | TCP | | -| shiori | main | main | 10098 | TCP | | -| statping | main | main | 10099 | TCP | | -| teedy | main | main | 10100 | TCP | | -| promcord | main | metrics | 10101 | TCP | | -| vaultwarden | main | main | 10102 | TCP | | -| zigbee2mqtt | main | main | 10103 | TCP | | -| tt-rss | main | main | 10104 | TCP | | -| collabora-online | main | main | 10105 | TCP | | -| minio | api | api | 10106 | TCP | | -| minio | main | main | 10107 | TCP | | -| transmission | main | main | 10109 | TCP | | -| anonaddy | main | main | 10110 | TCP | | -| blog | main | main | 10111 | TCP | | -| bookstack | main | main | 10112 | TCP | | -| clarkson | main | main | 10113 | TCP | | -| quassel-core | ident | ident | 10113 | TCP | | -| icinga2 | main | main | 10114 | TCP | | -| icinga2 | https | https | 10115 | TCP | | -| icinga2 | api | api | 10116 | TCP | | -| leantime | main | main | 10117 | TCP | | -| leantime | extra | extra | 10118 | UDP | | -| monica | main | main | 10119 | TCP | | -| snipe-it | main | main | 10120 | TCP | | -| xbackbone | main | main | 10121 | TCP | | -| airsonic-advanced | main | main | 10122 | TCP | | -| dokuwiki | main | main | 10123 | TCP | | -| emulatorjs | front | front | 10124 | TCP | | -| ipfs | main | main | 10125 | TCP | | -| nano-wallet | main | main | 10126 | TCP | | -| projectsend | main | main | 10127 | TCP | | -| endlessh | main | main | 10128 | TCP | | -| darktable | main | main | 10129 | TCP | | -| emulatorjs | main | main | 10130 | TCP | | -| firefox | main | main | 10131 | TCP | | -| hedgedoc | main | main | 10132 | TCP | | -| libreoffice | main | main | 10133 | TCP | | -| mysql-workbench | main | main | 10134 | TCP | | -| openvscode-server | main | main | 10135 | TCP | | -| pidgin | main | main | 10136 | TCP | | -| wireshark | main | main | 10137 | TCP | | -| emulatorjs | ipfs | ipfs | 10138 | TCP | | -| couchpotato | main | main | 10139 | TCP | | -| paperless-ng | main | main | 10140 | TCP | | -| papermerge | main | main | 10141 | TCP | | -| boinc | main | main | 10142 | TCP | | -| dillinger | main | main | 10143 | TCP | | -| domoticz | main | main | 10144 | TCP | | -| fleet | main | main | 10145 | TCP | | -| habridge | main | main | 10146 | TCP | | -| ipfs | gateway | gateway | 10147 | TCP | | -| kodi-headless | main | main | 10148 | TCP | | -| pwndrop | main | main | 10149 | TCP | | -| pydio-cells | main | main | 10150 | HTTPS | | -| scrutiny | main | main | 10151 | TCP | | -| kodi-headless | websocket | websocket | 10152 | TCP | | -| shlink | main | main | 10153 | TCP | | -| shlink-web-client | main | main | 10154 | HTTP | | -| airdcpp-webclient | main | main | 10155 | HTTP | | -| trilium-notes | main | main | 10156 | HTTP | | -| unmanic | main | main | 10157 | TCP | | -| weblate | main | main | 10158 | TCP | | -| photoview | main | main | 10159 | TCP | | -| linkace | main | main | 10160 | TCP | | -| librephotos | main | main | 10161 | TCP | | -| pydio-cells | healthcheck | healthcheck | 10162 | TCP | | -| grist | main | main | 10163 | TCP | | -| grist | api | api | 10164 | TCP | | -| budge | main | main | 10165 | TCP | | -| ghost | main | main | 10166 | TCP | | -| alist | main | main | 10167 | TCP | | -| ddns-go | main | main | 10168 | TCP | | -| openhab | main | main | 10169 | HTTP | | -| openhab | https | https | 10170 | HTTPS | | -| redmine | main | main | 10171 | HTTP | | -| matomo | main | main | 10172 | HTTP | | -| matomo | https | https | 10173 | HTTPS | | -| flexget | main | main | 10174 | HTTP | | -| qinglong | main | main | 10176 | HTTP | | -| lanraragi | main | main | 10177 | TCP | | -| homer | main | main | 10178 | TCP | | -| tinymediamanager | main | main | 10179 | TCP | | -| makemkv | main | main | 10180 | TCP | | -| makemkv | vnc | vnc | 10181 | TCP | | -| self-service-password | main | main | 10182 | TCP | | -| nextpvr | main | main | 10183 | TCP | | -| ispy-agent-dvr | main | main | 10184 | TCP | | -| koel | main | main | 10185 | TCP | | -| hammond | main | main | 10186 | TCP | | -| filebrowser | main | main | 10187 | HTTP | | -| iyuuplus | main | main | 10188 | HTTP | | -| kavita | main | main | 10189 | HTTP | | -| zerotier | main | main | 10190 | UDP | | -| rsshub | main | main | 10191 | HTTP | | -| verysync | main | main | 10193 | HTTP | | -| browserless | main | main | 10194 | TCP | | -| kutt | main | main | 10195 | TCP | | -| outline | main | main | 10196 | TCP | | -| chevereto | main | main | 10197 | TCP | | -| kimai | main | main | 10198 | TCP | | -| filerun | main | main | 10199 | TCP | | -| double-take | main | main | 10200 | TCP | | -| ml-workspace | main | main | 10201 | TCP | | -| storj-node | main | main | 14002 | TCP | | -| satisfactory | beacon | beacon | 15000 | UDP | | -| satisfactory | query | query | 15777 | UDP | | -| minecraft-bedrock | main | main | 19132 | UDP | | -| hyperion-ng | boblightservice | boblightservice | 19333 | TCP | | -| hyperion-ng | jsonservice | jsonservice | 19444 | TCP | | -| hyperion-ng | protobufservice | protobufservice | 19445 | TCP | | -| syncthing | discovery | discovery | 21027 | UDP | | -| airdcpp-webclient | unencrypted-tcp | unencrypted-tcp | 21248 | TCP | | -| airdcpp-webclient | search-udp | search-udp | 21248 | UDP | | -| airdcpp-webclient | encrypted-tcp | encrypted-tcp | 21249 | TCP | | -| syncthing | listeners | tcp | 22000 | TCP | | -| syncthing | listeners-udp | udp | 22000 | UDP | | -| impostor-server | main | main | 22023 | UDP | | -| verysync | bt-udp1 | bt-udp1 | 22027 | UDP | | -| verysync | bt-udp2 | bt-udp2 | 22037 | UDP | | -| joplin-server | main | main | 22300 | TCP | | -| verysync | data | data | 22330 | TCP | | -| minecraft-java | main | main | 25565 | TCP | | -| minecraft-java | rcon | rcon | 25575 | TCP | | -| storj-node | coretcp | coretcp | 28967 | TCP | | -| storj-node | coreudp | coreudp | 28967 | UDP | | -| omada-controller | omada-udp | omada-udp1 | 29810 | UDP | | -| omada-controller | omada-tcp | omada-tcp2 | 29811 | TCP | | -| omada-controller | omada-tcp | omada-tcp3 | 29812 | TCP | | -| omada-controller | omada-tcp | omada-tcp4 | 29813 | TCP | | -| omada-controller | omada-udp | omada-tcp4 | 29814 | TCP | | -| minetest | main | main | 30000 | UDP | | -| teamspeak3 | files | files | 30033 | TCP | | -| plex | main | main | 32400 | TCP | Potential conflict with plex (Official) | -| pydio-cells | gprc | gprc | 33060 | TCP | | -| xteve | main | main | 34400 | TCP | | -| foldingathome | control | control | 36330 | TCP | | -| habridge | comm | comm | 50000 | TCP | Potential conflict with ispy-agent-dvr | -| ispy-agent-dvr | webrtc | webrtc0 | 50000 | UDP | Potential conflict with habridge | -| ispy-agent-dvr | webrtc | webrtc1 | 50001 | UDP | | -| ispy-agent-dvr | webrtc | webrtc2 | 50002 | UDP | | -| ispy-agent-dvr | webrtc | webrtc3 | 50003 | UDP | | -| ispy-agent-dvr | webrtc | webrtc4 | 50004 | UDP | | -| ispy-agent-dvr | webrtc | webrtc5 | 50005 | UDP | | -| ispy-agent-dvr | webrtc | webrtc6 | 50006 | UDP | | -| ispy-agent-dvr | webrtc | webrtc7 | 50007 | UDP | | -| ispy-agent-dvr | webrtc | webrtc8 | 50008 | UDP | | -| ispy-agent-dvr | webrtc | webrtc9 | 50009 | UDP | | -| ispy-agent-dvr | webrtc | webrtc10 | 50010 | UDP | | -| appdaemon | tcp | tcp | 51050 | TCP | | -| podgrab | tcp | tcp | 51080 | TCP | | -| deluge | torrent | tcp | 51413 | TCP | | -| deluge | torrent-udp | udp | 51413 | UDP | | -| transmission | torrent | torrent | 51414 | TCP | | -| transmission | torrentudp | torrentudp | 51414 | UDP | | -| resilio-sync | bt-tcp | bt-tcp | 55555 | TCP | | -| resilio-sync | bt-udp | bt-udp | 55555 | UDP | | -| quassel-web | main | main | 64080 | TCP | | +| App | Service | Port Name | Port | Protocol | Note | +| :------------------------- | :-------------: | :-------------: | :---: | :------: | :---------------------------------------------: | +| amcrest2mqtt | main | main | - | - | Service disabled | +| leaf2mqtt | main | main | - | - | Service disabled | +| promcord | main | main | - | - | Service disabled | +| protonmail-bridge | main | main | - | - | Service disabled | +| speedtest-exporter | main | main | - | - | Service disabled | +| unpackerr | main | main | - | - | Service disabled | +| unpoller | main | main | - | - | Service disabled | +| uptimerobot-prometheus | main | main | - | - | Service disabled | +| ddclient | main | main | - | - | Service disabled | +| duckdns | main | main | - | - | Service disabled | +| webgrabplus | main | main | - | - | Service disabled | +| rsnapshot | main | main | - | - | Service disabled | +| protonmail-bridge | smtp | smtp | 25 | TCP | Potential conflict with other smtp apps | +| anonaddy | smtp | smtp | 25 | TCP | Potential conflict with other smtp apps | +| pihole | dns-tcp | dns-tcp | 53 | TCP | Potential conflict with k8s-gateway, technitium | +| pihole | dns | dns | 53 | UDP | Potential conflict with k8s-gateway, technitium | +| technitium | dns-tcp | dns-tcp | 53 | TCP | Potential conflict with k8s-gateway, pihole | +| technitium | dns-udp | dns-udp | 53 | UDP | Potential conflict with k8s-gateway, pihole | +| openldap | main | main | 389 | TCP | | +| minisatip | rtsp | rtsp | 554 | TCP | | +| openldap | ldaps | ldaps | 636 | TCP | | +| technitium | dns-tls | dns-tls | 853 | TCP | | +| strapi | main | main | 1337 | TCP | | +| domoticz | comm2 | comm2 | 1443 | TCP | | +| nntp2nntp | main | main | 1563 | TCP | | +| kms | main | main | 1688 | TCP | | +| freeradius | main | main | 1812 | UDP | | +| freeradius | accounting | accounting | 1813 | UDP | | +| node-red | main | main | 1880 | TCP | | +| mosquitto | main | main | 1883 | TCP | | +| minisatip | discovery | discovery | 1900 | UDP | | +| owncast | rtmp | rtmp | 1935 | TCP | Potential conflict with frigate | +| frigate | rtmp | rtmp | 1935 | TCP | Potential conflict with owncast | +| ubooquity | main | main | 2202 | TCP | | +| ubooquity | admin | admin | 2203 | TCP | | +| gitea | ssh | ssh | 2222 | TCP | | +| photoprism | main | main | 2342 | TCP | | +| docker-compose | main | main | 2376 | HTTPS | | +| valheim | valheim | valheim-1 | 2456 | UDP | | +| valheim | valheim | valheim-2 | 2457 | UDP | | +| valheim | valheim | valheim-3 | 2458 | UDP | | +| sqlitebrowser | main | main | 3000 | TCP | | +| uptime-kuma | main | main | 3001 | TCP | | +| vaultwarden | ws | ws | 3012 | TCP | | +| loki | main | main | 3100 | HTTP | | +| jdownloader2 | myjd | myjd | 3129 | TCP | | +| pylon | main | main | 3131 | TCP | | +| clamav | main | main | 3310 | TCP | | +| unifi | stun | mstunain | 3478 | UDP | Potential conflict with ispy-agent-dvr | +| ispy-agent-dvr | turn | turn | 3478 | UDP | Potential conflict with unifi | +| logitech-media-server | playertcp | slimprototcp | 3483 | TCP | | +| logitech-media-server | playerudp | slimprotoudp | 3483 | UDP | | +| ombi | main | main | 3579 | TCP | | +| ipfs | peer | peer | 4001 | TCP | | +| quassel-core | main | main | 4242 | TCP | | +| navidrome | main | main | 4533 | TCP | | +| requestrr | main | main | 4545 | TCP | | +| guacd | main | main | 4822 | TCP | | +| frigate | main | main | 5000 | TCP | | +| ipfs | api | api | 5001 | TCP | | +| appdaemon | main | main | 5050 | TCP | | +| overseer | main | main | 5055 | TCP | | +| nzbhydra | main | main | 5076 | TCP | | +| lazylibrarian | main | main | 5299 | TCP | | +| technitium | main | main | 5380 | UDP | | +| syslog-ng | syslog-udp | syslog-udp | 5514 | UDP | | +| n8n | main | main | 5678 | TCP | | +| esphome | main | main | 6052 | TCP | | +| novnc | main | main | 6080 | TCP | | +| domoticz | comm1 | comm1 | 6144 | TCP | | +| znc | main | main | 6501 | TCP | | +| syslog-ng | syslog-tls | syslog-tls | 6514 | TCP | | +| embystat | main | main | 6555 | TCP | | +| deemix | main | main | 6595 | TCP | | +| syslog-ng | main | main | 6601 | TCP | | +| ngircd | main | main | 6667 | TCP | | +| bazarr | main | main | 6767 | TCP | | +| unifi | speedtest | speedtest | 6789 | TCP | | +| aria2 | main | main | 6800 | TCP | | +| qbittorrent | torrent | torrent | 6881 | TCP | | +| qbittorrent | torrentudp | torrentudp | 6881 | UDP | | +| aria2 | listen | listen | 6888 | TCP | | +| logitech-media-server | main | main | 7000 | TCP | | +| clamav | milter | milter | 7357 | TCP | | +| foldingathome | main | main | 7396 | TCP | | +| satisfactory | main | main | 7777 | UDP | | +| haste-server | main | main | 7777 | TCP | | +| nextcloud | hpb | hpb | 7867 | TCP | | +| radarr | main | main | 7878 | TCP | | +| synapse | main | main | 8008 | TCP | | +| omada-controller | main | main | 8043 | TCP | | +| odoo | main | main | 8069 | TCP | | +| odoo | odoo | xmlrpcs | 8071 | TCP | | +| odoo | odoo | longpolling | 8072 | TCP | | +| unifi | comm | comm | 8080 | TCP | | +| calibre | webserver | webserver | 8081 | TCP | | +| traccar | main | main | 8082 | TCP | | +| calibre-web | main | main | 8083 | TCP | | +| calibre | main | main | 8084 | TCP | | +| htpcmanager | main | main | 8085 | TCP | | +| synclounge | main | main | 8088 | TCP | | +| mylar | main | main | 8090 | TCP | | +| zwavejs2mqtt | main | main | 8091 | TCP | | +| jellyfin | main | main | 8096 | TCP | | +| deluge | main | main | 8112 | TCP | | +| home-assistant | main | main | 8123 | TCP | | +| tautulli | main | main | 8181 | TCP | | +| flaresolverr | main | main | 8191 | TCP | | +| duplicati | main | main | 8200 | TCP | | +| tdarr | main | main | 8265 | TCP | | +| tdarr | comm | comm | 8266 | TCP | | +| tdarr-node | main | main | 8267 | TCP | | +| beets | main | main | 8337 | TCP | | +| syncthing | main | main | 8384 | TCP | | +| unifi | main | main | 8443 | HTTPS | | +| gaps | main | main | 8484 | TCP | | +| homebridge | main | main | 8581 | TCP | Might require Host Network | +| lidarr | main | main | 8686 | TCP | | +| readarr | main | main | 8787 | TCP | | +| omada-controller | userportal | websecure | 8843 | HTTPS | Potential conflict with unifi | +| unifi | guestportal | websecure | 8843 | HTTPS | Potential conflict with omada | +| minisatip | main | main | 8875 | TCP | | +| unifi | guestportal | web | 8880 | HTTP | | +| resilio-sync | main | main | 8888 | TCP | | +| sonarr | main | main | 8989 | TCP | | +| valheim | main | main | 9010 | TCP | | +| valheim | supervisor | supervisor | 9011 | TCP | | +| pihole | main | main | 9089 | TCP | | +| minio-console | main | main | 9090 | TCP | | +| authelia | main | main | 9091 | TCP | | +| synapse | replication | replication | 9092 | TCP | | +| synapse | metrics | metrics | 9093 | TCP | | +| jacket | main | main | 9117 | HTTP | | +| unpoller | main | metrics | 9130 | TCP | | +| owncloud-ocis | main | main | 9200 | TCP | | +| prowlarr | main | main | 9696 | TCP | | +| uptimerobot-prometheus | main | metrics | 9705 | TCP | | +| kodi-headless | esall | esall | 9777 | UDP | | +| speedtest-exporter | main | metrics | 9798 | TCP | | +| tvheadend | main | main | 9981 | TCP | | +| tvheadend | htsp | htsp | 9982 | TCP | | +| teamspeak3 | voice | voice | 9987 | UDP | | +| guacamole-client | main | main | 9998 | TCP | | +| stash | main | main | 9999 | TCP | | +| ser2sock | main | main | 10000 | TCP | | +| deconz | websocket | websocket | 10001 | TCP | | +| deconz | vnc | vnc | 10002 | TCP | | +| external-service | main | main | 10003 | HTTPS | | +| nullserv | main | main | 10004 | TCP | | +| nullserv | https | https | 10005 | TCP | | +| apache-musicindex | main | main | 10006 | TCP | | +| cryptofolio | main | main | 10007 | TCP | | +| deconz | main | main | 10008 | TCP | | +| dsmr-reader | main | main | 10009 | TCP | | +| freshrss | main | main | 10010 | TCP | | +| teamspeak3 | main | main | 10011 | TCP | | +| grav | main | main | 10012 | TCP | | +| grocy | main | main | 10013 | TCP | | +| heimdall | main | main | 10014 | TCP | | +| kanboard | main | main | 10015 | TCP | | +| librespeed | main | main | 10016 | TCP | | +| lychee | main | main | 10017 | TCP | | +| mealie | main | main | 10018 | TCP | | +| muximux | main | main | 10019 | TCP | | +| nextcloud | main | main | 10020 | TCP | | +| octoprint | main | main | 10021 | TCP | | +| organizr | main | main | 10022 | TCP | | +| gonic | main | main | 10023 | TCP | | +| pgadmin | main | main | 10024 | TCP | | +| photoshow | main | main | 10025 | TCP | | +| phpldapadmin | main | main | 10026 | TCP | | +| piwigo | main | main | 10027 | TCP | | +| pixapop | main | main | 10028 | TCP | | +| recipes | main | main | 10029 | TCP | | +| smokeping | main | main | 10030 | TCP | | +| truecommand | main | main | 10031 | TCP | | +| audacity | main | main | 10032 | TCP | | +| digikam | main | main | 10033 | TCP | | +| doublecommander | main | main | 10034 | TCP | | +| filezilla | main | main | 10035 | TCP | | +| flood | main | main | 10036 | TCP | | +| gitea | main | main | 10037 | TCP | | +| grafana | main | main | 10038 | HTTP | | +| icantbelieveitsnotvaletudo | main | main | 10039 | TCP | | +| littlelink | main | main | 10040 | TCP | | +| mstream | main | main | 10041 | TCP | | +| remmina | main | main | 10042 | TCP | | +| onlyoffice-document-server | main | main | 10043 | TCP | | +| wiki | main | main | 10044 | TCP | | +| wikijs | main | main | 10045 | TCP | | +| zwavejs2mqtt | ws | ws | 10046 | TCP | | +| airsonic | main | main | 10047 | TCP | | +| booksonic-air | main | main | 10048 | TCP | | +| deepstack | main | main | 10049 | TCP | | +| spotweb | main | main | 10050 | TCP | | +| firefox-syncserver | main | main | 10051 | TCP | | +| whoogle | main | main | 10052 | TCP | | +| handbrake | main | main | 10053 | TCP | | +| jdownloader2 | main | main | 10054 | TCP | | +| handbrake | vnc | vnc | 10055 | TCP | | +| jdownloader2 | vnc | vnc | 10056 | TCP | | +| nzbget | main | main | 10057 | TCP | | +| friendica | main | main | 10058 | TCP | | +| logitech-media-server | cli | cli | 10059 | TCP | | +| etherpad | main | main | 10060 | TCP | | +| thelounge | main | main | 10061 | TCP | | +| oscam | main | main | 10062 | TCP | | +| code-server | main | main | 10063 | TCP | | +| headphones | main | main | 10064 | TCP | | +| hyperion-ng | main | main | 10065 | TCP | | +| sickgear | main | main | 10066 | TCP | | +| sickchill | main | main | 10067 | TCP | | +| medusa | main | main | 10068 | TCP | | +| babybuddy | main | main | 10069 | TCP | | +| cloud9 | main | main | 10070 | TCP | | +| dizquetv | main | main | 10071 | TCP | | +| focalboard | main | main | 10072 | TCP | | +| golinks | main | main | 10073 | TCP | | +| healthchecks | main | main | 10074 | TCP | | +| pyload | main | main | 10075 | TCP | | +| shorturl | main | main | 10076 | TCP | | +| static | main | main | 10077 | TCP | | +| twtxt | main | main | 10078 | TCP | | +| emby | main | main | 10079 | TCP | | +| davos | main | main | 10081 | TCP | | +| fireflyiii | main | main | 10082 | TCP | | +| fossil | main | main | 10083 | TCP | | +| gotify | main | main | 10084 | TCP | | +| komga | main | main | 10085 | TCP | | +| owncast | main | main | 10088 | TCP | | +| openkm | main | main | 10090 | TCP | | +| miniflux | main | main | 10091 | TCP | | +| piaware | main | main | 10092 | TCP | | +| podgrab | main | main | 10093 | TCP | | +| pretend-youre-xyzzy | main | main | 10094 | TCP | | +| qbittorrent | main | main | 10095 | TCP | | +| reg | main | main | 10096 | TCP | | +| sabnzbd | main | main | 10097 | TCP | | +| shiori | main | main | 10098 | TCP | | +| statping | main | main | 10099 | TCP | | +| teedy | main | main | 10100 | TCP | | +| promcord | main | metrics | 10101 | TCP | | +| vaultwarden | main | main | 10102 | TCP | | +| zigbee2mqtt | main | main | 10103 | TCP | | +| tt-rss | main | main | 10104 | TCP | | +| collabora-online | main | main | 10105 | TCP | | +| minio | api | api | 10106 | TCP | | +| minio | main | main | 10107 | TCP | | +| transmission | main | main | 10109 | TCP | | +| anonaddy | main | main | 10110 | TCP | | +| blog | main | main | 10111 | TCP | | +| bookstack | main | main | 10112 | TCP | | +| clarkson | main | main | 10113 | TCP | | +| quassel-core | ident | ident | 10113 | TCP | | +| icinga2 | main | main | 10114 | TCP | | +| icinga2 | https | https | 10115 | TCP | | +| icinga2 | api | api | 10116 | TCP | | +| leantime | main | main | 10117 | TCP | | +| leantime | extra | extra | 10118 | UDP | | +| monica | main | main | 10119 | TCP | | +| snipe-it | main | main | 10120 | TCP | | +| xbackbone | main | main | 10121 | TCP | | +| airsonic-advanced | main | main | 10122 | TCP | | +| dokuwiki | main | main | 10123 | TCP | | +| emulatorjs | front | front | 10124 | TCP | | +| ipfs | main | main | 10125 | TCP | | +| nano-wallet | main | main | 10126 | TCP | | +| projectsend | main | main | 10127 | TCP | | +| endlessh | main | main | 10128 | TCP | | +| darktable | main | main | 10129 | TCP | | +| emulatorjs | main | main | 10130 | TCP | | +| firefox | main | main | 10131 | TCP | | +| hedgedoc | main | main | 10132 | TCP | | +| libreoffice | main | main | 10133 | TCP | | +| mysql-workbench | main | main | 10134 | TCP | | +| openvscode-server | main | main | 10135 | TCP | | +| pidgin | main | main | 10136 | TCP | | +| wireshark | main | main | 10137 | TCP | | +| emulatorjs | ipfs | ipfs | 10138 | TCP | | +| couchpotato | main | main | 10139 | TCP | | +| paperless-ng | main | main | 10140 | TCP | | +| papermerge | main | main | 10141 | TCP | | +| boinc | main | main | 10142 | TCP | | +| dillinger | main | main | 10143 | TCP | | +| domoticz | main | main | 10144 | TCP | | +| fleet | main | main | 10145 | TCP | | +| habridge | main | main | 10146 | TCP | | +| ipfs | gateway | gateway | 10147 | TCP | | +| kodi-headless | main | main | 10148 | TCP | | +| pwndrop | main | main | 10149 | TCP | | +| pydio-cells | main | main | 10150 | HTTPS | | +| scrutiny | main | main | 10151 | TCP | | +| kodi-headless | websocket | websocket | 10152 | TCP | | +| shlink | main | main | 10153 | TCP | | +| shlink-web-client | main | main | 10154 | HTTP | | +| airdcpp-webclient | main | main | 10155 | HTTP | | +| trilium-notes | main | main | 10156 | HTTP | | +| unmanic | main | main | 10157 | TCP | | +| weblate | main | main | 10158 | TCP | | +| photoview | main | main | 10159 | TCP | | +| linkace | main | main | 10160 | TCP | | +| librephotos | main | main | 10161 | TCP | | +| pydio-cells | healthcheck | healthcheck | 10162 | TCP | | +| grist | main | main | 10163 | TCP | | +| grist | api | api | 10164 | TCP | | +| budge | main | main | 10165 | TCP | | +| ghost | main | main | 10166 | TCP | | +| alist | main | main | 10167 | TCP | | +| ddns-go | main | main | 10168 | TCP | | +| openhab | main | main | 10169 | HTTP | | +| openhab | https | https | 10170 | HTTPS | | +| redmine | main | main | 10171 | HTTP | | +| matomo | main | main | 10172 | HTTP | | +| matomo | https | https | 10173 | HTTPS | | +| flexget | main | main | 10174 | HTTP | | +| qinglong | main | main | 10176 | HTTP | | +| lanraragi | main | main | 10177 | TCP | | +| homer | main | main | 10178 | TCP | | +| tinymediamanager | main | main | 10179 | TCP | | +| makemkv | main | main | 10180 | TCP | | +| makemkv | vnc | vnc | 10181 | TCP | | +| self-service-password | main | main | 10182 | TCP | | +| nextpvr | main | main | 10183 | TCP | | +| ispy-agent-dvr | main | main | 10184 | TCP | | +| koel | main | main | 10185 | TCP | | +| hammond | main | main | 10186 | TCP | | +| filebrowser | main | main | 10187 | HTTP | | +| iyuuplus | main | main | 10188 | HTTP | | +| kavita | main | main | 10189 | HTTP | | +| zerotier | main | main | 10190 | UDP | | +| rsshub | main | main | 10191 | HTTP | | +| verysync | main | main | 10193 | HTTP | | +| browserless | main | main | 10194 | TCP | | +| kutt | main | main | 10195 | TCP | | +| outline | main | main | 10196 | TCP | | +| chevereto | main | main | 10197 | TCP | | +| kimai | main | main | 10198 | TCP | | +| filerun | main | main | 10199 | TCP | | +| double-take | main | main | 10200 | TCP | | +| ml-workspace | main | main | 10201 | TCP | | +| technitium | dns-cert | dns-cert | 10202 | TCP | | +| technitium | dns-https | dns-https | 10203 | TCP | | +| technitium | dns-https-proxy | dns-https-proxy | 10204 | TCP | | +| storj-node | main | main | 14002 | TCP | | +| satisfactory | beacon | beacon | 15000 | UDP | | +| satisfactory | query | query | 15777 | UDP | | +| minecraft-bedrock | main | main | 19132 | UDP | | +| hyperion-ng | boblightservice | boblightservice | 19333 | TCP | | +| hyperion-ng | jsonservice | jsonservice | 19444 | TCP | | +| hyperion-ng | protobufservice | protobufservice | 19445 | TCP | | +| syncthing | discovery | discovery | 21027 | UDP | | +| airdcpp-webclient | unencrypted-tcp | unencrypted-tcp | 21248 | TCP | | +| airdcpp-webclient | search-udp | search-udp | 21248 | UDP | | +| airdcpp-webclient | encrypted-tcp | encrypted-tcp | 21249 | TCP | | +| syncthing | listeners | tcp | 22000 | TCP | | +| syncthing | listeners-udp | udp | 22000 | UDP | | +| impostor-server | main | main | 22023 | UDP | | +| verysync | bt-udp1 | bt-udp1 | 22027 | UDP | | +| verysync | bt-udp2 | bt-udp2 | 22037 | UDP | | +| joplin-server | main | main | 22300 | TCP | | +| verysync | data | data | 22330 | TCP | | +| minecraft-java | main | main | 25565 | TCP | | +| minecraft-java | rcon | rcon | 25575 | TCP | | +| storj-node | coretcp | coretcp | 28967 | TCP | | +| storj-node | coreudp | coreudp | 28967 | UDP | | +| omada-controller | omada-udp | omada-udp1 | 29810 | UDP | | +| omada-controller | omada-tcp | omada-tcp2 | 29811 | TCP | | +| omada-controller | omada-tcp | omada-tcp3 | 29812 | TCP | | +| omada-controller | omada-tcp | omada-tcp4 | 29813 | TCP | | +| omada-controller | omada-udp | omada-tcp4 | 29814 | TCP | | +| minetest | main | main | 30000 | UDP | | +| teamspeak3 | files | files | 30033 | TCP | | +| plex | main | main | 32400 | TCP | Potential conflict with plex (Official) | +| pydio-cells | gprc | gprc | 33060 | TCP | | +| xteve | main | main | 34400 | TCP | | +| foldingathome | control | control | 36330 | TCP | | +| habridge | comm | comm | 50000 | TCP | Potential conflict with ispy-agent-dvr | +| ispy-agent-dvr | webrtc | webrtc0 | 50000 | UDP | Potential conflict with habridge | +| ispy-agent-dvr | webrtc | webrtc1 | 50001 | UDP | | +| ispy-agent-dvr | webrtc | webrtc2 | 50002 | UDP | | +| ispy-agent-dvr | webrtc | webrtc3 | 50003 | UDP | | +| ispy-agent-dvr | webrtc | webrtc4 | 50004 | UDP | | +| ispy-agent-dvr | webrtc | webrtc5 | 50005 | UDP | | +| ispy-agent-dvr | webrtc | webrtc6 | 50006 | UDP | | +| ispy-agent-dvr | webrtc | webrtc7 | 50007 | UDP | | +| ispy-agent-dvr | webrtc | webrtc8 | 50008 | UDP | | +| ispy-agent-dvr | webrtc | webrtc9 | 50009 | UDP | | +| ispy-agent-dvr | webrtc | webrtc10 | 50010 | UDP | | +| appdaemon | tcp | tcp | 51050 | TCP | | +| podgrab | tcp | tcp | 51080 | TCP | | +| deluge | torrent | tcp | 51413 | TCP | | +| deluge | torrent-udp | udp | 51413 | UDP | | +| transmission | torrent | torrent | 51414 | TCP | | +| transmission | torrentudp | torrentudp | 51414 | UDP | | +| resilio-sync | bt-tcp | bt-tcp | 55555 | TCP | | +| resilio-sync | bt-udp | bt-udp | 55555 | UDP | | +| quassel-web | main | main | 64080 | TCP | | ## Dependency Apps