Honestly firewall-config does a pretty decent job with the firewalling part of things, if you don’t need anything too complicated. It’s not web based, but can be run over ssh without too much of an install footprint.

I think the way to go here would actually be to integrate some plugins with cockpit-project, which already has some of what you’d need.