include default firewall for just nginx + ssh access