Added user rules (see 'ufw status' for running firewall):
ufw allow in on tailscale0 comment 'SHiRE Sentinel trusted tailnet'
ufw allow in on wlp1s0 from 192.168.1.0/24 to any port 22 proto tcp comment 'SHiRE Sentinel LAN SSH'
ufw allow in on wlp1s0 from 192.168.1.0/24 to any port 5353 proto udp comment 'SHiRE Sentinel LAN mDNS'
ufw allow from 192.168.1.129 to any port 22 proto tcp comment 'SHiRE Sentinel current SSH safeguard'