---
# UFW firewall defaults
# Override common_ufw_allowed_ports in host_vars for public-facing services.
common_ufw_enabled: true
common_ufw_allowed_ports: []
#   - {port: 80, proto: tcp, comment: "HTTP"}
#   - {port: 443, proto: tcp, comment: "HTTPS"}