Firewall
In this page
Data model
FirewallRule rows (name, port, protocol, source, action, enabled) are seeded in prisma/seed.ts with common SSH/HTTP/HTTPS allow rules when empty.
API
GET /api/v1/security/firewall
Read-only list for authorized roles.
UI
/security — firewall section shows data when wired; “Firewall mutations are not implemented yet” — no POST/DELETE API in security.controller.ts today.