Even if Ollama is already listening externally, if the UFW firewall has not allowed port 11434, you still need to run ufw allow 11434/tcp to establish connectivity.