--- manage_sshd_config: false group_nft_input: - "# Allow SSH from world" - "tcp dport { ssh } accept"