monolith/firewall: allow ssh, http, basics