---
- name: Enable firewall with deny by default
ufw:
state: enabled
policy: deny
direction: incoming