## 1. Reorder UFW tasks in base role

- [x] 1.1 Move SSH and port allow rules before UFW enable in `roles/base/tasks/main.yml`