---
  ### oefenweb.ufw
  ufw_rules:
    - rule: allow
      to_port: 22
      protocol: tcp
      comment: 'ssh'
      interface: ens18
    - rule: allow
      to_port: 22
      protocol: tcp
      comment: 'ssh'
      interface: wg0
    - rule: allow
      to_port: 51820
      comment: 'wireguard'
      interface: ens18
      protocol: udp
    - rule: allow
      to_port: 4949
      protocol: tcp
      comment: 'munin-node'
      from_ip: 192.168.2.0/24
  ufw_etc_default_default_forward_policy: ACCEPT