I’ve found the need to open port 443 on ufw — I got API Request Preparation Failed in the logs otherwise. I thought this is best mentioned because the standard installation instructions mention enabling ufw.
Port 25 is mentioned in the mail-receiver.yml and seems to bypass ufw.