Controlling Port Access with UFW

step-by-step guide to install, set sane defaults, allow SSH/HTTP(S), restrict ports by IP/subnet, enable safely and verify rules to avoid lockouts.