Which ports needs to be exposed to the internet?

Install & Config
#1

I run jisti meet in a LXC container - after the recommended install and some configuration issue fixing the following jisti meet related ports are listening

udp 5000, 10000, 18397
tcp 5222, 8080, 80, 5269, 8888, 443, 5280

in the standard install only port 5347 runs on the loopback address and is intended to be internal. What is with the other XMPP server ports (5222 xmpp-client,5269 xmpp-server,5280 xmpp-bosh) ? Which ports needs to be exposed to the internet?

What is with port 8080 an 8888?

#2

Assuming a standard installation:

TCP 80 (at least, for the first run of Let’s Encrypt) and 443
UDP: 10000

#3

Thanks for the quick answer. The effort for me is to avoid prosody and the jisti java programs to listen on all interfaces.