---

firewall_enabled: yes
firewall_standard_rules: yes
firewall_log_prefix: "FW:"
firewall_whitelist_ip: []
firewall_whitelist_ipv6: []
firewall_late_whitelist_ip: []
firewall_late_whitelist_ipv6: []

firewall_input_default_drop: true
firewall_output_default_drop: true
firewall_output_whitelist_domains: []
firewall_output_whitelist_ipv4: []
firewall_output_whitelist_ipv6: []
firewall_output_learning: false

firewall_whitelist_office_ip: []
firewall_whitelist_office_ports: []

firewall_ssh_acl: []
firewall_ssh_acl_extra: []
firewall_influx_acl: []
firewall_influx_acl_extra: []
firewall_allow_internal_dns: true

firewall_custom_ipv4_rules: ""
firewall_custom_ipv6_rules: ""