---
firewall:
  - port: "3306"
    proto: tcp
    interface: "eth0"
...