---
  ### oefenweb.ufw
  ufw_rules:
    - rule: allow
      to_port: 22
      protocol: tcp
      comment: 'ssh'
      interface: ens18
    - rule: allow
      to_port: 51820
      comment: 'wireguard'
      interface: ens18
  ufw_etc_default_default_forward_policy: ACCEPT