Setting up BitBucket on Windows Server

[hirergear]

Background: Have BitBucket up and running on a Win 2016 Server and can connect to the BitBucket URL or 7990 from other machines as expected, I several questions:

1)  the Windows built in firewall seems to interfere with a push and clone operations. When I turn the Firewall off it seems to work. Do you have details of ports and apps that need to be opened / enabled for BitBucket to work when Windows Firewall is in place?

2) I want to have an on-prem BitBucket instance, but use a public BitBucket as a (private/secure) mirror in the case of a DR. Is there any guidance on how to set this up?

Thanks