Firewall

1. Install ufw:

   sudo apt install -y ufw

2. Allow SSH before enabling the firewall — reversing this order can lock you out:

   sudo ufw allow 22/tcp
   sudo ufw allow from 10.0.0.0/24 to any port 8080

   tip

   Adjust 10.0.0.0/24 to match your actual LAN subnet. Add the extra FIBER Lite ports too if you installed its full stack:

   sudo ufw allow from 10.0.0.0/24 to any port 80
   sudo ufw allow from 10.0.0.0/24 to any port 1880
   sudo ufw allow from 10.0.0.0/24 to any port 8086
   sudo ufw allow from 10.0.0.0/24 to any port 3000

3. Enable the firewall:

   sudo ufw enable

4. Immediately verify SSH and all web UIs are still reachable from another machine on the LAN before disconnecting.