# Firewall
firewall_disable_ufw: true
firewall_flush_rules_and_chains: true
firewall_additional_rules:
  - "iptables --policy INPUT DENY"
firewall_allowed_tcp_ports:
  - "22"
  - "80"
  - "443"
  # Jitsi
  - "4443" # tenant_a
  - "4543" # tenant_b
firewall_allowed_udp_ports:
  # Jitsi
  - "10000" # tenant_a
  - "11000" # tenant_b