add puppetlabs/firewall dependency, and use it for ssh allow