Add step to enable ufw rules

ansible/roles/btc/tasks/ufw.yml

@@ -3,6 +3,11 @@
     name: ufw
     state: present
 
+# UFW logging can full up the kernel (dmesg) and message logs
+- name: Disable logging
+  community.general.ufw:
+    logging: 'off'
+
 - name: Allow OpenSSH inbound
   community.general.ufw:
     rule: allow
@@ -14,8 +19,14 @@
     port: ssh
     proto: tcp
   
-- name: Enable ufw
+- name: Enable ufw system service
   ansible.builtin.service:
     name: ufw
     state: started
     enabled: yes
+
+# This is necessary in addition to enabling the system service
+- name: Enable ufw rules
+  community.general.ufw:
+    state: enabled
+    policy: deny