{ pkgs, lib, config, ... }:
{
networking.nftables.ruleset = ''
  add rule inet filter net2fw tcp dport {10022} counter accept comment "Reverse SSH"
'';
services.openssh.gatewayPorts = "clientspecified";
}