diff --git a/image/overlay/etc/nftables.d/10-services.nft b/image/overlay/etc/nftables.d/10-services.nft
new file mode 100644
index 0000000..14fed98
--- /dev/null
+++ b/image/overlay/etc/nftables.d/10-services.nft
@@ -0,0 +1,2 @@
+add rule inet filter input tcp dport { 22, 2222 } accept comment "SSH"
+add rule inet filter input udp dport 41641 accept comment "Tailscale"
\ No newline at end of file