Basic Firewall Config

[edit firewall]
vyos@test-vyos01# show
 group {
     address-group TrustedHosts {
         address 8.8.8.8
     }
 }
 name EXTERNAL-TO-SELF {
     default-action reject
     rule 100 {
         action accept
         description "Allow SSH"
         destination {
             group {
                 address-group TrustedHosts
             }
             port 22
         }
         protocol tcp
     }
 }
 name SELF-TO-EXTERNAL {
     default-action accept
 }