IT Administrator Guide
Everything your IT department needs to allowlist Zone 1 on your school network.
Required Domains
Please allowlist the following domains in your firewall and content filter:
| Domain | Purpose | Protocol / Port |
|---|---|---|
| zone1.coach | Web application | HTTPS, port 443 |
| api.zone1.coach | API endpoint | HTTPS, port 443 |
| db.tbriankight.com | Authentication & data | HTTPS, port 443 |
| api.stripe.com | Payment processing | HTTPS, port 443 |
| js.stripe.com | Payment processing | HTTPS, port 443 |
Network Requirements
- HTTPS / TLS 1.2 or higher on port 443 only.
- No non-standard ports required.
- No VPN required.
- WebSocket connections are used for real-time features. Ensure your proxy allows WebSocket upgrades on port 443.
SSL Inspection
Important
If your network uses SSL inspection (MITM proxy), please configure a bypass for zone1.coach, *.zone1.coach, and *.tbriankight.com. SSL inspection will break authentication and prevent the application from functioning correctly.
Browser Support
Chrome
90+
Safari
15+
Edge
90+
Firefox
90+
Data & Privacy
Zone 1 is designed for coaching staff. We do not knowingly collect or store education records as defined by FERPA. Our platform serves coaches, not students.
For complete details, read our Privacy Policy.
Contact
For IT-specific questions, start with Zone 1 Support for an instant answer. Need a human? Email support@tbriankight.com. We respond within 24 hours.
Save for your records: Print this page or use your browser's "Save as PDF" function (Ctrl+P / Cmd+P) to keep a copy for your IT documentation.