We've introduced a new Firewall Rules tab on servers that you can use to customize the firewall rules for your servers.
Hatchbox generates firewall rules automatically for your servers based upon their roles. For example, if you give a server the PostgreSQL role, we will automatically add a firewall rule to only allow port 5432 on the private subnet. This lets other servers in your cluster talk to Postgres, but nothing from the public internet to keep things secure.
Firewall rules are handled by UFW on your servers which denies all incoming traffic by default.
