You will find there is an option in "Firewall" to chose 3rd party, which is what you have running ESS. I would recommend some sort of back up solution for your system, other then this, Config looks good.
The bulk of my backups goes onto my synology nas but i'm putting them there manualy.
Allready had customers with infected nas because of the 'open door' from a rig...
I would recommend CCleaner or Privazer as well as some type of backup solution.
HTTPS Everywhere & uBlock Origin are also good extension recommendations.
Thanks for sharing your config