Add UFW

* Allow HTTP
* Allow DNS via UDP
* Allow (rate limited) SSH

see #79