Allow only TCP traffic on specified ports

roles/ubuntu_base/tasks/firewall.yml

@@ -8,13 +8,13 @@
     rule: allow
     port: "{{ item }}"
   loop:
-    - 22     # Gitea SSH
-    - 80     # HTTP
-    - 443    # HTTPS
-    - 389    # OpenLDAP
-    - 636    # OpenLDAP
-    - 25     # Email
-    - 465    # Email
-    - 587    # Email
-    - 993    # Email
-    - 19022  # SSH
+    - "22/tcp"     # Gitea SSH
+    - "80/tcp"     # HTTP
+    - "443/tcp"    # HTTPS
+    - "389/tcp"    # OpenLDAP
+    - "636/tcp"    # OpenLDAP
+    - "25/tcp"     # Email
+    - "465/tcp"    # Email
+    - "587/tcp"    # Email
+    - "993/tcp"    # Email
+    - "19022/tcp"  # SSH