Used a great digital ocean resource on securing an Ubuntu server. Condensed the steps into a script:
#!/bin/bash
sudo apt-get install ufw
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw allow ssh
sudo ufw allow 22
sudo ufw allow 2222
sudo ufw enable
sudo ufw allow http
sudo ufw allow https
sudo ufw status verbose