disabled ufw for now and VPC allows 80, 53, 443, 8080, 51820 (service on 8080 is responding to URL-based requests, WG VPN connects alright to 51820 too) so I think the ports are ok