Network Requirements
Complete list of network endpoints and firewall rules required for Selora Hub installation and operation.
Selora-Hub
Network
Firewall
Installation
Selora Hub
Selora-Hub, Network, Firewall, InstallationComplete list of network endpoints and firewall rules required for Selora Hub installation and operation.Search results
Network Requirements
Selora Hub requires network connectivity for installation, updates, and ongoing operation. This page documents all required endpoints and firewall rules.
Quick Reference
| Service | Port | Protocol | Purpose |
|---|---|---|---|
cache.nixos.org | 443 | TCP | Selora OS package cache |
github.com | 443 | TCP | HAOS images, Newt releases, Nix flakes |
gitlab.com | 443 | TCP | Config/update pulls |
connect.selorahomes.com | 443 | TCP | Backend API |
s3.us-east-1.amazonaws.com | 443 | TCP | Backup storage |
*.pool.ntp.org | 123 | UDP | Time sync |
dashboard.selorabox.com | 51820 | UDP | Remote access (WireGuard) - only if configured |
dashboard.selorabox.com | 21820 | UDP | Remote access (WireGuard) - only if configured |
Basic Requirements
- Ethernet connection (DHCP by default, or a fixed IP )
- Internet access for initial configuration and updates
- Stable network during installation
Detailed Endpoint Information
Core Selora OS
| Endpoint | Port | Protocol | Purpose |
|---|---|---|---|
cache.nixos.org | 443 | TCP | Binary cache for packages |
*.pool.ntp.org | 123 | UDP | Default NTP (systemd-timesyncd) |
GitHub (multiple uses)
| Endpoint | Port | Purpose |
|---|---|---|
github.com | 443 | Home Assistant OS image downloads (home-assistant/operating-system/releases) |
github.com | 443 | Newt agent downloads (fosrl/newt/releases) |
github.com | 443 | Nix flake inputs (NixOS/nixpkgs) |
Selora Hub Backend
| Endpoint | Port | Purpose |
|---|---|---|
connect.selorahomes.com | 443 | API (token refresh, config sync, health reports) |
gitlab.com | 443 | Configuration and update pulls |
Backup Storage
| Endpoint | Port | Purpose |
|---|---|---|
s3.us-east-1.amazonaws.com | 443 | Cloud backups (or your S3-compatible endpoint) |
Remote Secure Access (Optional)
If Remote Secure Access is configured, the device uses Newt (a WireGuard-based agent) to connect to a Pangolin server.
| Endpoint | Port | Protocol | Purpose |
|---|---|---|---|
dashboard.selorabox.com | 51820 | UDP | WireGuard tunnel (Newt component) |
dashboard.selorabox.com | 21820 | UDP | Client communication |
Last modified April 22, 2026: Rename NixOS to Selora OS in user-facing docs (c48cdd4)