#!/usr/sbin/nft -f
#
# !!! This file is managed by Ansible !!!
#

table inet firewall {
    chain inbound {
        # Allow openssh.
        tcp dport {{ services.openssh.port | default(22) }} accept comment "openssh"
    }
}