#!/bin/nft -f
# vim: set ts=4 sw=4:
table inet filter {

    chain my_filter {
        tcp dport { ${node.metadata.get("ssh/port", 22)} } accept \
        comment "Accept SSH traffic"
    }

}