Update website/src/pages/en/indexing/tooling/graph-node.mdx

idalithb · web-flow · commit de992a4d613e · 2025-06-05T14:43:56.000-07:00
diff --git a/website/src/pages/en/indexing/tooling/graph-node.mdx b/website/src/pages/en/indexing/tooling/graph-node.mdx
@@ -89,7 +89,8 @@ When it is running Graph Node exposes the following ports:
 >
 > - Exposing Graph Node's internal ports can lead to a full system compromise.
 > - These ports must remain **private**: JSON-RPC Admin endpoint, Indexing Status API, and PostgreSQL.
-> - Only expose 8000 (GraphQL HTTP) and 8001 (GraphQL WebSocket) if needed. Lock everything else down with firewalls or private networks.
+> - Do not expose 8000 (GraphQL HTTP) and 8001 (GraphQL WebSocket) directly to the internet. Even though these are used for GraphQL queries, they should ideally be proxied though `indexer-agent` and served behind a production-grade proxy. 
+> - Lock everything else down with firewalls or private networks.
 
 ## Advanced Graph Node configuration
 

Original file line number	Diff line number	Diff line change
`@@ -89,7 +89,8 @@ When it is running Graph Node exposes the following ports:`
`89`	`89`	`>`
`90`	`90`	`> - Exposing Graph Node's internal ports can lead to a full system compromise.`
`91`	`91`	`> - These ports must remain private: JSON-RPC Admin endpoint, Indexing Status API, and PostgreSQL.`
`92`		`-> - Only expose 8000 (GraphQL HTTP) and 8001 (GraphQL WebSocket) if needed. Lock everything else down with firewalls or private networks.`
	`92`	+> - Do not expose 8000 (GraphQL HTTP) and 8001 (GraphQL WebSocket) directly to the internet. Even though these are used for GraphQL queries, they should ideally be proxied though `indexer-agent` and served behind a production-grade proxy.
	`93`	`+> - Lock everything else down with firewalls or private networks.`
`93`	`94`
`94`	`95`	`## Advanced Graph Node configuration`
`95`	`96`