Incoming Requests

Unless you have changed the default configuration or use a reverse proxy, PhotoPrism® Pro is reachable via port 2342 on all network devices. If you are using a firewall, please ensure that this port can be accessed from other computers on your network, or that your instance can be accessed through a reverse proxy:

Network Diagram

Outgoing Connections

As explained in our Privacy Policy, reverse geocoding and interactive world maps depend on retrieving the necessary information from us and MapTiler AG, headquartered in Switzerland. Both services are provided with a very high level of privacy and confidentiality.

View Privacy Policy chevron_right View Compliance FAQ chevron_right

In order to successfully set up your installation and view location details in PhotoPrism® Pro, you must allow requests to the following hosts if you have a firewall installed, and make sure that your Internet connection is working:

  • prsm.app
  • dl.photoprism.app
  • my.photoprism.app
  • cdn.photoprism.app
  • maps.photoprism.app
  • setup.photoprism.app
  • places.photoprism.app
  • places.photoprism.xyz

In addition, the following API endpoints should be whitelisted so that public Docker images can be pulled from Docker Hub:

  • auth.docker.io
  • registry-1.docker.io
  • index.docker.io
  • dseasb33srnrn.cloudfront.net
  • production.cloudflare.docker.com

IPTables and Docker

On Linux, Docker manipulates the iptables rules to provide network isolation. This does have some implications for what you need to do if you want to have your own policies in addition to the rules Docker manages.

Learn more ›

PhotoPrism® Documentation

For detailed information on specific product features, services, and related resources, see our Knowledge Base, or read the User Guide for help using the web user interface: