ReferencePorts

Port 4102

Hydra IAM (public), OAuth2 endpoint

Port `4102`, Hydra IAM (public)

Role: OAuth2 endpoint

Exposure: host-bound

Employee-facing OAuth2.

Public exposure is expected, but defense-in-depth via Caddy.

# From outside the VPS
nmap -p 4102 <vps-ip>
# Expected: depends on your firewall config

Port 4101

Kratos IAM (admin), Admin API

Port 4103

Hydra IAM (admin), OAuth2 admin