default['firewall']['ufw']['defaults'] = {
  ipv6: 'yes',
  manage_builtins: 'no',
  ipt_sysctl: '/etc/ufw/sysctl.conf',
  ipt_modules: 'nf_conntrack_ftp nf_nat_ftp nf_conntrack_netbios_ns',
  policy: {
    input: 'DROP',
    output: 'ACCEPT',
    forward: 'DROP',
    application: 'SKIP',
  },
}