diff --git a/group_vars/all/main.yml b/group_vars/all/main.yml
index a331ddbac1fd228867680563be34c009203b78ac..93108efea3c99f3e92a8ca1f9e994eb16adf3ad3 100644
--- a/group_vars/all/main.yml
+++ b/group_vars/all/main.yml
@@ -1,6 +1,6 @@
 ---
 
-dslproxy: "arne-centos.cert-labs.uninett.no"
+dslproxy: "<CHANGE_ME:hostname>"
 
 # TheHive Button plugin
 THEHIVE_URL: "https://hive.gn4-3-wp8-soc.sunet.se/"
@@ -8,6 +8,7 @@ THEHIVE_API_KEY: "5LymseWiurZBrQN8Kqp8O+9KniTL5cE0"
 THEHIVE_OWNER: "admin"
 
 soctools_netname: "soctoolsnet"
+soctools_network: "172.22.0.0/16"
 
 repo: gn43-dsl
 version: 7
diff --git a/roles/docker/tasks/networkcreate.yml b/roles/docker/tasks/networkcreate.yml
index 90343141e7de0e934bb8b199e9bd19101f90804c..15dd085b67010e748051df77b69b0933cb3b2a0a 100644
--- a/roles/docker/tasks/networkcreate.yml
+++ b/roles/docker/tasks/networkcreate.yml
@@ -4,6 +4,8 @@
   docker_network:
     name: "{{ soctools_netname }}"
     enable_ipv6: no
+    ipam_config:
+      - subnet: "{{ soctools_network }}"
   tags:
     - start
 
diff --git a/roles/nifi/tasks/main.yml b/roles/nifi/tasks/main.yml
index e66a72a67cfab33ec545d4b4a35f0b1306dd4e3c..ec0249ccf785f4a8e9c55e3330d63787735ac4f0 100644
--- a/roles/nifi/tasks/main.yml
+++ b/roles/nifi/tasks/main.yml
@@ -48,14 +48,14 @@
 - name: Configure NiFi boostrap properties
   template:
     src: bootstrap.conf.j2
-    dest: conf/bootstrap.conf
+    dest: "{{ ansible_facts.env['NIFI_HOME'] }}/conf/bootstrap.conf"
   tags:
     - start
 
 - name: Configure NiFi properties for secure servers
   template:
     src: nifi.properties.j2
-    dest: conf/nifi.properties
+    dest: "{{ ansible_facts.env['NIFI_HOME'] }}/conf/nifi.properties"
   tags:
     - start
 
@@ -69,37 +69,39 @@
 - name: Configure users
   template:
     src: users.xml.j2
-    dest: conf/users.xml
+    dest: "{{ ansible_facts.env['NIFI_HOME'] }}/conf/users.xml"
   tags:
     - start
 
 - name: Configure NiFi authorizers for secure servers
   template:
     src: authorizers.xml.j2
-    dest: conf/authorizers.xml
+    dest: "{{ ansible_facts.env['NIFI_HOME'] }}/conf/authorizers.xml"
   tags:
     - start
 
 - name: Create conf/enrich dir
-  file: path=conf/enrich state=directory
+  file: path={{ ansible_facts.env['NIFI_HOME'] }}/conf/enrich state=directory
+  tags:
+   - start
 
 - name: Copy empty GeoLite2-City database
   copy:
     src: GeoLite2-City.mmdb
-    dest: conf/enrich/GeoLite2-City.mmdb
+    dest: "{{ ansible_facts.env['NIFI_HOME'] }}/conf/enrich/GeoLite2-City.mmdb"
   tags:
     - start
 
 - name: Download list of Tor exist nodes
   get_url:
     url: https://check.torproject.org/torbulkexitlist
-    dest: conf/enrich/tornodes.csv
+    dest: "{{ ansible_facts.env['NIFI_HOME'] }}/conf/enrich/tornodes.csv"
   tags:
    - start
 
 - name: Add header to tornodes.csv
   lineinfile:
-    path: conf/enrich/tornodes.csv
+    path: "{{ ansible_facts.env['NIFI_HOME'] }}/conf/enrich/tornodes.csv"
     line: 'ip_addr'
     insertbefore: BOF
   tags:
@@ -108,19 +110,19 @@
 - name: Download umbrella-top-1m.csv
   get_url:
     url: http://s3-us-west-1.amazonaws.com/umbrella-static/top-1m.csv.zip
-    dest: conf/enrich/umbrella-top-1m.csv
+    dest: "{{ ansible_facts.env['NIFI_HOME'] }}/conf/enrich/umbrella-top-1m.csv"
   tags:
    - start
 
 - name: Download alexa-top-1m.csv
   get_url:
     url: http://s3.amazonaws.com/alexa-static/top-1m.csv.zip
-    dest: conf/enrich/alexa-top-1m.csv
+    dest: "{{ ansible_facts.env['NIFI_HOME'] }}/conf/enrich/alexa-top-1m.csv"
   tags:
    - start
 
 - name: Start NiFi
-  command: "./bin/nifi.sh start"
+  command: "{{ ansible_facts.env['NIFI_HOME'] }}/bin/nifi.sh start"
   tags:
     - start
 
@@ -135,7 +137,7 @@
 #      when: ping_result|success
 
 - name: Stop NiFi
-  command: "./bin/nifi.sh stop"
+  command: "{{ ansible_facts.env['NIFI_HOME'] }}/bin/nifi.sh stop"
   tags:
     - stop
 
diff --git a/roles/soctools-server/tasks/main.yml b/roles/soctools-server/tasks/main.yml
index 47f9f8dcd62b3377ea3a66d51c7a946131dce0e4..7b5739e8cb488315827b222e6cedf581e32a6f4e 100644
--- a/roles/soctools-server/tasks/main.yml
+++ b/roles/soctools-server/tasks/main.yml
@@ -34,7 +34,20 @@
   with_items:
     - "{{sysctlconfig}}"
 
+- name: Configure fw
+  ansible.posix.firewalld:
+    source: "{{ soctools_network }}"
+    zone: public
+    permanent: yes
+    state: enabled
+
+- name: Reload firewalld
+  systemd:
+    state: restarted
+    daemon_reload: yes
+    name: firewalld
+
 - name: Start Docker service
   systemd:
     name: docker
-    state: started
\ No newline at end of file
+    state: started