diff --git a/group_vars/all.yml b/group_vars/all.yml
index 36932479..b6afeaa9 100644
--- a/group_vars/all.yml
+++ b/group_vars/all.yml
@@ -43,6 +43,8 @@
       protocol: tcp
       comment: 'ssh'
       from_ip: 192.168.2.0/24
+  ufw_default_incoming_policy: deny
+  ufw_default_outgoing_policy: allow
   ### ryandaniels.create_users
   users:
   - username: mg