Added user rules (see 'ufw status' for running firewall):
ufw allow 22/tcp
ufw allow 9200
ufw allow from 192.0.2.0/24 to any port 9300 proto tcp
ufw allow in on eth0 to any port 9301 proto tcp
ufw deny 9400/tcp
ufw limit 2222/tcp
ufw allow 9500:9510/tcp
ufw route allow in on mesh0 out on docker0 to any port 8082 proto tcp
ufw allow to 192.0.2.1 port 9600 proto tcp
ufw allow 9700/udp
ufw route allow in on mesh0 to any port 8083 proto tcp
ufw allow 9900/tcp
ufw allow 80,443/tcp
ufw allow in on mesh0 to any port 5432 proto tcp
ufw route allow 8080/tcp