---

- name: Enable firewall with deny by default
  ufw:
    state: enabled
    policy: deny
    direction: incoming