bundles/firewall/files/etc/nftables.d/22-ssh.nft


1
2
3
4
5
6
7
8
9
10

#!/bin/nft -f
# vim: set ts=4 sw=4:
table inet filter {

    chain my_filter {
        tcp dport { ${node.metadata.get("ssh/port", 22)} } accept \
        comment "Accept SSH traffic"
    }

}