Firewall Setup
Open the following ports on each node:
| Port | Protocol | Purpose |
|---|---|---|
| 22 | TCP | SSH |
| 80, 443 | TCP | HTTP/HTTPS for hosted sites |
| 2087 | TCP | Panel admin interface |
| 2083 | TCP | Panel customer interface |
| 25, 465, 587 | TCP | Mail submission |
| 53 | TCP/UDP | DNS (if this node serves DNS) |
Outbound HTTPS (443) must also be allowed so the panel can reach the licensing API described in the API docs — activation and periodic checks happen over outbound HTTPS only, no inbound port is required for licensing.
If you use a host-level firewall in addition to your cloud provider's security groups, make sure both are configured consistently — a rule open in one but blocked in the other still blocks the traffic.