Service ports#

This reference documents all ports used by DUMB services. Use this guide to configure firewall rules, reverse proxies, and understand network requirements.

Quick reference#

DUMB core services#

DUMB API#

The backend API that powers service management, configuration, and monitoring. It listens on 127.0.0.1 inside the container and is not host-published by the maintained Compose file.

http://localhost:8000/process/processes  # backend-native, from inside the container
http://localhost:3005/api/process/processes  # normal frontend proxy

DUMB Frontend#

The main dashboard for managing DUMB services.

The same listener exposes backend REST routes under /api/* and WebSocket routes under /ws/*. REST requests have /api removed before they are sent to the loopback-only backend on port 8000.

http://localhost:3005

Traefik proxy#

Provides unified access to embedded service UIs when enabled.

http://localhost:18080/service/ui/<service_name>

Traefik dashboard/API#

Traefik exposes its dashboard/API on the Traefik entrypoint plus one port. TPA uses this internally through TRAEFIK_API_URL=http://127.0.0.1:18081.

Media servers#

Plex Media Server#

http://localhost:32400/web

Jellyfin#

http://localhost:8096

Emby#

http://localhost:8096

Content management#

Riven#

http://localhost:3000  # Frontend
http://localhost:8080  # API

CLI Debrid#

http://localhost:5000

Decypharr#

http://localhost:8282

InfiniDysk#

http://localhost:3000  # Frontend

AltMount#

AltMount also exposes /live; DUMB probes it while completing the post-start Arr integration pass.

Arr suite#

The Arr applications support multiple instances for different workflows (for example Decypharr, InfiniDysk, or AltMount). The first instance starts from the application's base default; additional/conflicting instances are assigned the next free port and saved to /config/dumb_config.json.

Sonarr (TV shows)#

http://localhost:8989  # typical first instance
http://localhost:8990  # typical second instance

Radarr (Movies)#

http://localhost:7878  # typical first instance
http://localhost:7879  # typical second instance

Lidarr (Music)#

http://localhost:8686

Whisparr (Adult)#

http://localhost:6969

Prowlarr (Indexers)#

http://localhost:9696

NeutArr#

http://localhost:9705  # Default instance

Seerr#

http://localhost:5055

Optional services#

Pulsarr#

http://localhost:3003

AIOStreams#

The local configure page is:

http://localhost:3006/stremio/configure

Remote Stremio clients require the AIOStreams base_url to use a stable trusted HTTPS origin. Do not use DUMB's embedded /ui/aiostreams route as that public base URL. See the AIOStreams deployment guide.

Maintainerr#

http://localhost:6246

mediastorm#

The embedded UI opens at /admin.

http://localhost:7777/admin

Bazarr#

http://localhost:6767

Tautulli#

http://localhost:8181

Zilean#

http://localhost:8182

Traefik Proxy Admin#

http://localhost:3004

Cloudflared#

Cloudflared does not expose a local web UI port. It opens an outbound tunnel connection to Cloudflare and forwards public hostname traffic to DUMB Traefik.

Dependent services#

Zurg#

http://localhost:9090  # typical first instance
http://localhost:9091  # typical second instance

Phalanx DB#

http://localhost:8888

Database services#

PostgreSQL#

postgresql://<user>:<password>@localhost:5432/<configured_database>

pgAdmin#

http://localhost:5050

Port ranges by category#

Web UIs (browser access)#

3000-3005, 5000, 5050, 5055, 6969, 7878-7879, 8088, 8096,
8181-8182, 8282, 8686, 8989-8990, 9696, 9705, 18081, 32400

APIs (service communication)#

5001, 5432, 8000, 8080, 8888, 9090-9091

Proxy#

18080

Firewall configuration#

Minimum required ports#

For basic DUMB operation, publish only:

Full access#

For complete functionality including all service UIs:

# Example UFW configuration
sudo ufw allow 3005/tcp  # DUMB Frontend
sudo ufw allow 18080/tcp # Traefik (embedded UIs)
sudo ufw allow 32400/tcp # Plex

The backend port 8000 is loopback-only and unpublished by default. Expose it only when a direct API consumer requires it, after changing dumb.api_service.host to 0.0.0.0, enabling authentication, and restricting network access.

Related pages#

• Embedded UIs
• Configuration
• Services Overview