Bastion only allows ssh, web nodes allow 80