Move ufw to tna-run

docker/tna-python/Dockerfile

@@ -116,13 +116,10 @@ RUN set -eux; \
 	rm -rfv /var/lib/apt/lists/*
 
 # ==========================================
-# Update the firewall rule to allow only for
-# HTTPS, then create an SSL certificate that
-# we can use locally in nginx to secure this
-# container
+# Generate an SSL cert we can use locally in
+# nginx to secure this container
 # ==========================================
-RUN ufw allow 'Nginx HTTPS'; \
-    mkdir /etc/nginx/ssl; \
+RUN mkdir /etc/nginx/ssl; \
     openssl req -x509 -noenc -newkey rsa:2048 -keyout /etc/nginx/ssl/key.pem -out /etc/nginx/ssl/req.pem -days 90 -subj "/C=GB/ST=London/L=Kew/O=The National Archives/OU=Digital/CN=localhost"
 
 # ==========================================

docker/tna-python/bin/tna-run

@@ -32,6 +32,9 @@ then
   exit 1
 fi
 
+# Change the firewall rules to only allow HTTPS traffic
+ufw allow 'Nginx HTTPS'
+
 # Convert $ENVIRONMENT to lowercase
 ENVIRONMENT=$(echo "$ENVIRONMENT" | tr '[:upper:]' '[:lower:]')