diff --git a/self-host/community-guides/rules.mdx b/self-host/community-guides/rules.mdx
index 4cb0240..cf79471 100644
--- a/self-host/community-guides/rules.mdx
+++ b/self-host/community-guides/rules.mdx
@@ -29,7 +29,7 @@ This table compiles paths that need to be allowed for various apps to work with
| **Security & Privacy** | |
| AdGuard Home | `/api/*` |
| Ente Auth | `*api*` |
-| Vaultwarden/Bitwarden | `/api/*`
`/identity/*`
`/wl/*`
Always Deny - Path - `/admin/*` |
+| Vaultwarden/Bitwarden | `/api/*`
`/identity/*`
`/wl/*`
`/notifications/hub` required for websocket notifications enabled by default since v1.29.0 of Vaultwarden
`/icons/*` For proper loading of Favicons (Optional)
Always Deny - Path - `/admin/*` |
| **Cloud & Sync** | |
| Nextcloud | `/` (Main interface)
`/index.php` (Core handler)
`/remote.php` (Remote access)
`/status.php` (Status checks)
`/ocs` (Collaboration Services API)
`/apps` (Applications)
`/remote.php/webdav` (WebDAV endpoint)
`/remote.php/dav` (CalDAV/CardDAV)
`/remote.php/caldav` (Calendar sync)
`/remote.php/carddav` (Contacts sync)
`/ocs/v1.php` (API endpoints)
`/ocs/v2.php` (API v2 endpoints)
`/login` (Authentication)
`/.well-known/*` (Service discovery)
`/.well-known/webfinger` (WebFinger protocol)
`/s/*` (Shared files/folders) |
| Onlyoffice | `/cache/*`
`*/CommandService.ashx`
`*/converter/*`
`*/doc/*`
`*/downloadas/*`
`/downloadfile/*`
`*/fonts/*`
`/healthcheck`
`/methodology/*`
`*/plugins.json`
`*/sdkjs/*`
`*/sdkjs-plugins/*`
`*/themes.json`
`*/web-apps/*` |