# ODIN Port Plan (MVP)

All non-frontend exposed ports must stay in 12000-12999.

## Frontend Edge

- 80/tcp: HTTP (Caddy)
- 443/tcp: HTTPS (Caddy)

## Platform and Data Ports

- 12000: Prometheus
- 12001: Alertmanager
- 12002: Pushgateway
- 12003: Grafana
- 12004: Uptime Kuma
- 12005: Xray Checker
- 12010: API Gateway
- 12020: Management Service
- 12030: Geo Service
- 12040: Security Service
- 12060: NATS client port
- 12061: NATS monitoring port
- 12500: PostgreSQL
- 12501: Redis

## Reserved Ranges

- 12100-12199: auth/session services
- 12200-12299: deployment workers and job runners
- 12300-12399: geo pipeline workers
- 12400-12499: security analyzers and ban engine
- 12600-12999: future modules (marketing, analytics, ads)