ReferencePorts
Per-port reference
Every port across the Ionize Compose stack
Ionize binds 18 ports in the dev stack. Each has its own page with role and exposure recommendation.
All ports
| Port | Service | Scope |
|---|---|---|
80 | Caddy | internet |
443 | Caddy | internet |
2000 | Site | intranet via Caddy |
3000 | Auth CIAM | intranet only |
3001 | Dashboard CIAM | intranet via Caddy |
3100 | Kratos CIAM (public) | host-bound (firewall to localhost in prod) |
3101 | Kratos CIAM (admin) | host-bound (firewall to localhost) |
3102 | Hydra CIAM (public) | host-bound (Caddy proxies) |
3103 | Hydra CIAM (admin) | host-bound (firewall to localhost) |
4000 | Auth IAM | intranet only |
4001 | Dashboard IAM | intranet via Caddy |
4100 | Kratos IAM (public) | host-bound |
4101 | Kratos IAM (admin) | host-bound (firewall to localhost) |
4102 | Hydra IAM (public) | host-bound |
4103 | Hydra IAM (admin) | host-bound (firewall to localhost) |
5432 | PostgreSQL | host-bound (firewall mandatory) |
5433 | pgAdmin | intranet via Caddy + OIDC SSO |
5434 | MailSlurper | dev only |
See Operate — Network topology for the canonical reference.