Even though the firewall shields the router from the public interface, you may still need to disable RouterOS products and services. Select parameters as proven during the screenshot, except for the region configurations and SSID. You may want to also pick a unique frequency and antenna gain;