To add, you may not need to worry too much about setting up a firewall if your machine is behind a router/gateway that also has a firewall. There are arguments both ways, in-would suggest researching that some. I did it because I could, but I also only wireguard exposed publicly so it may be over kill