Allow ports only on specific interface
ufw allow in on tailscale0 to any port 22 proto tcp