diff --git a/deploy.yml b/deploy.yml
index c84110b..c3a68be 100644
--- a/deploy.yml
+++ b/deploy.yml
@@ -50,6 +50,13 @@
       tags:
         - ufw
 
+    - name: enable ufw
+      community.general.ufw:
+        state: enabled
+        policy: reject
+      tags:
+        - ufw
+
     - name: open ports
       community.general.ufw:
         rule: allow