Use UFW for allowing SSH
actually turn on the firewall
add missing resouce that gets notified
explicitly set default port