Which ports need to be open on Synology Firewall / Docker Image?

I am using reverse proxy to access BW, with SSL cert and port 443, on a synology.
However I am having trouble accessing the instance via the web when the syonolgy firewall is on, when it is off it works fine.

I have 443 open and working, which I thought is all it would need?

Am I missing something are there other ports that need to be open. I am not sure if it makes a difference but do want to use websockets, however I am not even able to access the GUI on 443?