Close unrequired ports

Since we're using Traefik, we can mostly operate with only ports 80 and 443 open.

Some services do require additional ports, like an SSH port- those should remain open, e.g. Gitea

Probably best to leave them listed in the .j2, but commented out

I'll be working on this one today taking a break from this project