fixed typo in unattended upgrades
added missing state section for ntp rules caught by @iSec
added what ports tor is allowed to connect to so that we can restrict the destination port in the host/network firewall rules.
The alternative would be removing the destination port restriction in the host/network firewall rules. Thanks @iSec for finding this
Talked with @iSec about usability issues with the password part the 2fa for the document interface but feel that having access restricted by something you know is worth the usability trade off.