networking.nftables.ruleset = ''
add rule inet filter net2fw tcp dport 10022 counter accept comment "SSH (reverse to losurdo)"
'';
-services.openssh.gatewayPorts = "clientspecified";
+services.openssh = {
+ gatewayPorts = "clientspecified";
+ openFirewall = true;
+};
boot.initrd.network.ssh = {
enable = true;
# To prevent ssh from freaking out because a different host key is used,