{ pkgs, lib, config, ... }: { networking.nftables.ruleset = '' add rule inet filter net2fw tcp dport 10022 counter accept comment "SSH (reverse to losurdo)" ''; services.openssh.gatewayPorts = "clientspecified"; }