From b67d11d260d605ad11ef3fa51586487f05c96496 Mon Sep 17 00:00:00 2001
From: Jamil <jamilbk@users.noreply.github.com>
Date: Thu, 2 Dec 2021 08:38:45 -0800
Subject: [PATCH] Clarify note about exposed ports

---
 README.md | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index e1fbc7ba8..7123666e1 100644
--- a/README.md
+++ b/README.md
@@ -103,7 +103,10 @@ generate a free SSL cert for your domain.
 ### Security Considerations
 
 Firezone is **beta** software. We highly recommend **limiting network access to
-the Web UI** to prevent exposing it to the public Internet.
+the Web UI** (by default port tcp/443) to prevent exposing it to the public Internet.
+
+The WireGuard listen port (by default port udp/51821) should be exposed to allow user
+devices to connect.
 
 ## Supported Linux Distributions