What ports do I have to open on my firewall for AGH to work correctly?

[Iliannnn]

I am using AGH as a DoT server. Whenever I restrict my firewall to only allow the selected ports my upstream and bootstrap DNS servers stop working:

Even when opening ALL AGH ports that it uses as proposed here the issue persists. I am running AGH on a Hetzner dedicated server, I even contacted them about it and they told me they couldn't help me.

My current firewall configuration that causes this:

Whenever I allow all ports to be opened, AGH works perfectly.

Even with all ports that AGH uses I have the same issue:

[Iliannnn]

I found the issue, for anyone that wants to get Hetzner Firewall to work with Adguard Home: you have to open port 53 as Source port.