backup(), restore()

Volume labels (label)

Switch to NFTables or UFW.

Firewall:
- Block all traffic by default
- Allow outgoing (wan) http,https,dns,ssh,ntp,ping
- Allow incoming (wan) http,https,ssh,wireguard
- Allow wireguard traffic to lan (so access for instance 192.168.2.x) and wan (access the internet),
BUT only http,https,ping,dns