Service ports¶

This reference documents all ports used by DUMB services. Use this guide to configure firewall rules, reverse proxies, and understand network requirements.

Quick reference¶

DUMB core services¶

DUMB API¶

The backend API that powers service management, configuration, and monitoring. It listens on 127.0.0.1 inside the container and is not host-published by the maintained Compose file.

http://localhost:8000/process/processes  # backend-native, from inside the container
http://localhost:3005/api/process/processes  # normal frontend proxy

DUMB Frontend¶

The main dashboard for managing DUMB services.

The same listener exposes backend REST routes under /api/* and WebSocket routes under /ws/*. REST requests have /api removed before they are sent to the loopback-only backend on port 8000.

http://localhost:3005

Traefik proxy¶

Provides unified access to embedded service UIs when enabled.

http://localhost:18080/service/ui/<service_name>

Traefik dashboard/API¶

Traefik exposes its dashboard/API on the Traefik entrypoint plus one port. TPA uses this internally through TRAEFIK_API_URL=http://127.0.0.1:18081.

Media servers¶

Plex Media Server¶

http://localhost:32400/web

Jellyfin¶

http://localhost:8096

Emby¶

http://localhost:8096

Content management¶

Riven¶

http://localhost:3000  # Frontend
http://localhost:8080  # API

CLI Debrid¶

http://localhost:5000

Decypharr¶

http://localhost:8282

InfiniDysk¶

http://localhost:3000  # Frontend

AltMount¶

AltMount also exposes /live; DUMB probes it while completing the post-start Arr integration pass.

Arr suite¶

The Arr applications support multiple instances for different workflows (for example Decypharr, InfiniDysk, or AltMount). The first instance starts from the application's base default; additional/conflicting instances are assigned the next free port and saved to /config/dumb_config.json.

Sonarr (TV shows)¶

http://localhost:8989  # typical first instance
http://localhost:8990  # typical second instance

Radarr (Movies)¶

http://localhost:7878  # typical first instance
http://localhost:7879  # typical second instance

Lidarr (Music)¶

http://localhost:8686

Whisparr (Adult)¶

http://localhost:6969

Prowlarr (Indexers)¶

http://localhost:9696

NeutArr¶

http://localhost:9705  # Default instance

Seerr¶

http://localhost:5055

Optional services¶

Pulsarr¶

http://localhost:3003

AIOStreams¶

The local configure page is:

http://localhost:3006/stremio/configure

Remote Stremio clients require the AIOStreams base_url to use a stable trusted HTTPS origin. Do not use DUMB's embedded /ui/aiostreams route as that public base URL. See the AIOStreams deployment guide.

Maintainerr¶

http://localhost:6246

mediastorm¶

The embedded UI opens at /admin.

http://localhost:7777/admin

Bazarr¶

http://localhost:6767

Tautulli¶

http://localhost:8181

Zilean¶

http://localhost:8182

Traefik Proxy Admin¶

http://localhost:3004

Cloudflared¶

Cloudflared does not expose a local web UI port. It opens an outbound tunnel connection to Cloudflare and forwards public hostname traffic to DUMB Traefik.

Dependent services¶

Zurg¶

http://localhost:9090  # typical first instance
http://localhost:9091  # typical second instance

Phalanx DB¶

http://localhost:8888

Database services¶

PostgreSQL¶

postgresql://<user>:<password>@localhost:5432/<configured_database>

pgAdmin¶

http://localhost:5050

Port ranges by category¶

Web UIs (browser access)¶

3000-3005, 5000, 5050, 5055, 6969, 7878-7879, 8088, 8096,
8181-8182, 8282, 8686, 8989-8990, 9696, 9705, 18081, 32400

APIs (service communication)¶

5001, 5432, 8000, 8080, 8888, 9090-9091

Proxy¶

18080

Firewall configuration¶

Minimum required ports¶

For basic DUMB operation, publish only:

Full access¶

For complete functionality including all service UIs:

# Example UFW configuration
sudo ufw allow 3005/tcp  # DUMB Frontend
sudo ufw allow 18080/tcp # Traefik (embedded UIs)
sudo ufw allow 32400/tcp # Plex

The backend port 8000 is loopback-only and unpublished by default. Expose it only when a direct API consumer requires it, after changing dumb.api_service.host to 0.0.0.0, enabling authentication, and restricting network access.

Related pages¶

• Embedded UIs
• Configuration
• Services Overview