Experimenting a bit with having servers at home, but published on the Internet via WireGuard. Felt I needed a firewall for the home server, even though only the Internet server can see it through Wireguard. I found ufw more difficult to understand, so went with firewalld.