---
  ### oefenweb.ufw
  ufw_rules:
    - rule: allow
      to_port: 22
      protocol: tcp
      comment: 'ssh'
    - rule: allow
      to_port: 443
      comment: 'https'
    - rule: allow
      to_port: 80
      comment: 'http'