Next step is to close access to the websockets and mqtt control ports from the outside (they are open by default):