better comments in bootstrap.yml
webserver: ufw allow http