Architecture
Sitrep has two components. Understanding how they connect explains why you don't need to open ports on your router.
The two components
A hosted web application. Runs in the cloud, served by Cloudflare Workers. You access it from any browser. It never connects to Sentinel directly — it issues commands that Sentinel picks up on its next poll.
A Windows service running on your game server machine. It polls the panel every few seconds for commands, executes them locally, and sends back status and heartbeats. All connections originate from Sentinel outbound.
Why outbound-only matters
Because Sentinel connects out to the panel rather than accepting inbound connections, you don't need to:
Your game server still needs inbound ports open for players to connect (Arma Reforger UDP 2001 and 17777). But the management plane — Sentinel to panel — is entirely outbound HTTPS.
Request flow
/api/agent/commands, receives the restart command