Bring your towel and join one of the fastest growing data communities. Welcome to our second-generation open source orchestration platform, a completely rethought approach to dataflow automation.

Prefect Community

Quick question regarding the new open-sourced ui server :raised_hands:

What ports and services should be facing the external world (if I was deploying this in some out of premises server or cluster)?
The `ui:8080` is obvious, but I could not make it work without adding `graphql:4201` too, and I am not sure if that’s safe…

Hey David, I’m double-checking our documentation give me one moment

Hey <@UL42YMZC7>,

When using Prefect Server, make sure you’re deploying in a secure network. You should not expose your API to the outside world, only within your trusted network.

Like most workflow engines (airflow, etc) we can’t know how people are going to deploy, so we don’t take a stance on how to authenticate.

The ui (port 8080) and the apollo (port 4200) ports both need to be exposed externally to the docker network for use

If you need more authentication out of the box, take a look at Prefect Cloud, which comes with a full suite of authentication tools (add team members, generate auth tokens , etc)

All right thanks <@UKVFX6N3B>… I think I mixed up on my side and I wanted to say 4200 instead of 4201

Thanks for the input and advice on these security considerations. I was looking forward to connect through some exposed ingress service, or at least a port forward (i am using k8s). I think that after your input, I’ll go for the latter.

I know that cloud will probably be more adapted for our needs but we are on a limited budget (for the moment!)