`/etc/default/ufw/rules.after`

this will only allow access via certain IPs to docker contaiers

``` :DOCKER-USER - [0:0] -A DOCKER-USER -s 24.87.101.13 -j RETURN -A DOCKER-USER -s 96.48.240.53 -j RETURN -A DOCKER-USER -s 192.157.115.213 -j RETURN -A DOCKER-USER -s 192.168.1.0/24 -j RETURN -A DOCKER-USER -m conntrack –ctstate RELATED,ESTABLISHED -j RETURN -A DOCKER-USER -i enp4s0 -m conntrack –ctstate NEW -j DROP -A DOCKER-USER -j RETURN ```

current `ufw status numbered`

``` [ 1] 22,3579,7878,8181,8989,9000,9001,9091,9696,32400/tcp ALLOW IN 192.168.1.0/24 [ 2] 192.168.1.0/24 22,3579,7878,8181,8989,9000,9001,9091,9696,32400/tcp ALLOW OUT Anywhere (out) [ 3] Anywhere ALLOW IN 172.16.0.0/12 [ 4] 80/tcp ALLOW IN Anywhere [ 5] 443/tcp ALLOW IN Anywhere [ 6] 80/tcp (v6) ALLOW IN Anywhere (v6) [ 7] 443/tcp (v6) ALLOW IN Anywhere (v6) ```

dont forget to change the containers network to use `proxy_network` (made from nginx-proxy-manager)

In order to get SSL certs on nginx, enable the following briefly within after.rules

``` # This is needed for reverse proxy + https #-A DOCKER-USER -p tcp –dport 80 -j ACCEPT #-A DOCKER-USER -p tcp –dport 443 -j ACCEPT ``` this will allow my server out globally