--- firewall: - port: "5432" proto: tcp interface: "eth0" ...