Configure Debian nftables firewall. Allow everything out, limit in, disable forward.