NOTE.md 179 B
Note
No capability changes. This is an internal task ordering fix within the base role. The firewall behavior (deny incoming, allow SSH, allow configured ports) is unchanged.