diff --git a/defaults/main.yaml b/defaults/main.yaml
index 77649a2..179dd85 100644
--- a/defaults/main.yaml
+++ b/defaults/main.yaml
@@ -16,15 +16,13 @@ apt_repository_security: "https://archive.ubuntu.com/ubuntu"
 # firewall
 firewall_enable: true
 firewall_basic_rules:
-  - name: "anti-lockout rule"
-    from_ip: "any"
+  - name: "allow ssh from bastion.siempie.internal"
     to_port: "22"
-    proto: "tcp"
+    from_ip: "192.168.10.55"
 firewall_host_rules:
-  - name: "anti-lockout rule"
-    from_ip: "any"
+  - name: "allow ssh from bastion.siempie.internal"
     to_port: "22"
-    proto: "tcp"
+    from_ip: "192.168.10.55"
 
 # ntp
 ntp_server: "pool.ntp.org"