---

# generic settings
- name: "firewall - set default policy and enable logging"
  community.general.ufw:
    state: "enabled"
    direction: "incoming"
    policy: "deny"
    logging: "on"
  tags:
    - "firewall"