===== Allow ports only on specific interface =====

<code bash>
ufw allow in on tailscale0 to any port 22 proto tcp
</code>