---

group_nft_input:
  - "tcp dport { ldap, ldaps } accept # Allow LDAP traffic"