---

manage_sshd_config: false

group_nft_input:
  - "tcp dport { ssh } accept # Allow SSH from world"