Review firewall config for ssh proxy

Current firewalld rules are added to the public zone. Review the firewalld rules in the ssh proxy node and add them to the appropriate zone.

We might also have to restrict ssh port access to only a few IPs like the master nodes OR cheaha cluster CIDR range, because only rc-ops team will access those machines via ssh

The sshpiper port 22 is opened to the internet for ssh.

added Backlog label

changed title from Review firewall config for proxy to Review firewall config for ssh proxy

changed the description

Related code regarding firewalld: https://gitlab.rc.uab.edu/rc/hpc-factory/-/blob/feat-hpc-factory/ansible/roles/fail2ban/tasks/main.yml

changed milestone to %Cutover to proxy nodes for production Cheaha access

removed Backlog label

added Sprint 25-11 label

added Backlog label and removed Sprint 25-11 label

changed the description

closed

removed Backlog label

added Sprint 25-11 label