dont set postgres password, add ufw to packages