WordOps Firewall config

ufw.sh

#!/usr/bin/env bash

# get current ssh port
CURRENT_SSH_PORT=$(grep "Port" /etc/ssh/sshd_config | awk -F " " '{print $2}')

# define firewall rules
ufw logging low
ufw default allow outgoing
ufw default deny incoming

# default ssh port
ufw limit 22

# custom ssh port
if [ "$CURRENT_SSH_PORT" != "22" ];then
    ufw limit "$CURRENT_SSH_PORT"
fi

# dns
ufw allow 53

# nginx
ufw allow http
ufw allow https

# ntp
ufw allow 123

# wordops backend
ufw allow 22222

Thanks a ton for the great insights master. Will make the required changes right now.

Should I keep the following ones too or aren't they required:

sudo ufw allow 21 comment 'FTP'
sudo ufw allow 25 comment 'Mail'

If you only have WordOps installed on your server, the port 25 isn't required, and for the FTP, WordOps already handle this configuration during proftpd installation.