From a7bb06c0dfca368b1fa3f90aa0f529fce317732f Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Tue, 12 Aug 2025 13:20:54 -0700
Subject: [PATCH] Add 21820 ports in

---
 self-host/dns-and-networking.mdx    | 7 +++++--
 self-host/manual/docker-compose.mdx | 1 +
 self-host/quick-install.mdx         | 2 +-
 3 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/self-host/dns-and-networking.mdx b/self-host/dns-and-networking.mdx
index 53c5a74..14c2012 100644
--- a/self-host/dns-and-networking.mdx
+++ b/self-host/dns-and-networking.mdx
@@ -100,7 +100,8 @@ gerbil:
   ports:
     - "80:80"        # HTTP/SSL verification and non-SSL resources
     - "443:443"      # HTTPS for web UI and SSL resources
-    - "51820:51820"  # WireGuard for Newt and client connections
+    - "51820:51820"  # WireGuard for Newt connections
+    - "21820:21820"  # WireGuard for client connections
 ```
 
 ### Firewall Configuration
@@ -112,7 +113,7 @@ Ensure your VPS firewall allows these ports:
   Configure security groups/firewall rules in your cloud provider's dashboard to allow:
   
   - TCP ports 80 and 443
-  - UDP port 51820
+  - UDP ports 51820 and 21820
 </Tab>
 
 <Tab title="UFW (Ubuntu)">
@@ -120,6 +121,7 @@ Ensure your VPS firewall allows these ports:
   sudo ufw allow 80/tcp
   sudo ufw allow 443/tcp
   sudo ufw allow 51820/udp
+  sudo ufw allow 21820/udp
   sudo ufw enable
   ```
 </Tab>
@@ -129,6 +131,7 @@ Ensure your VPS firewall allows these ports:
   sudo firewall-cmd --permanent --add-port=80/tcp
   sudo firewall-cmd --permanent --add-port=443/tcp
   sudo firewall-cmd --permanent --add-port=51820/udp
+  sudo firewall-cmd --permanent --add-port=21820/udp
   sudo firewall-cmd --reload
   ```
 </Tab>
diff --git a/self-host/manual/docker-compose.mdx b/self-host/manual/docker-compose.mdx
index c0b39e7..9f3acc4 100644
--- a/self-host/manual/docker-compose.mdx
+++ b/self-host/manual/docker-compose.mdx
@@ -169,6 +169,7 @@ services:
       - SYS_MODULE
     ports:
       - 51820:51820/udp
+      - 21820:21820/udp
       - 443:443 # Port for traefik because of the network_mode
       - 80:80 # Port for traefik because of the network_mode
 
diff --git a/self-host/quick-install.mdx b/self-host/quick-install.mdx
index ffed406..e74dede 100644
--- a/self-host/quick-install.mdx
+++ b/self-host/quick-install.mdx
@@ -14,7 +14,7 @@ Before you begin, ensure you have:
 - **Linux server** with root access and public IP address
 - **Domain name** pointing to your server's IP address for the dashboard
 - **Email address** for Let's Encrypt SSL certificates and admin log in
-- **Open ports on firewall** for 80 (TCP), 443 (TCP), and 51820 (UDP)
+- **Open ports on firewall** for 80 (TCP), 443 (TCP), 51820 (UDP), and 21820 (UDP for clients)
 
 <Tip>
 **Recommended**: Ubuntu 20.04+ or Debian 11+ for best compatibility and performance.