Firewall Rules

These rules should be considered in a firewalled environment:

Inbound Rules

Purpose	Protocol Name	Port Number	Transport Layer Protocol
Used for redirecting HTTP traffic to HTTPS for secure communication	HTTP	80	TCP
Enables secure connections to the Passbolt server using SSL/TLS	HTTPS	443	TCP

Outbound Rules

Purpose	Protocol Name	Port Number	Transport Layer Protocol
Used for legacy systems or specific cases where HTTPS is not supported	HTTP	80	TCP
Facilitates secure outbound connections for various services, including: Passbolt's online resources: fullBaseUrl for self-referencing healthcheck download.passbolt.com Secure package repositories Bitbucket Operating system and software updates	HTTPS	443	TCP
Connects to Unique DUO authentication endpoint	HTTPS	443	TCP
Connects to Yubico API endpoints: api.yubico.com api2.yubico.com api3.yubico.com api4.yubico.com api5.yubico.com	HTTPS	443	TCP
Connects to other APIs and services: api.github.com api.pwnedpasswords.com (see Have I Been Pwned FAQs)	HTTPS	443	TCP
Sends email notifications through your configured SMTP server	SMTP	Usually 587	TCP
Resolves domain names for SMTP servers and updates from download.passbolt.com	DNS	53	UDP
Synchronizes server time with an NTP server, essential for GPG and MFA/OTP functionality	NTP	123	UDP
Retrieves GPG keys securely from key servers: keys.mailvelope.com keys.openpgp.org pgp.mit.edu	HKPS	11371	TCP