From 7b9bd5567aef9bbd1152bccc7624dd1bc90f9e16 Mon Sep 17 00:00:00 2001
From: iceBear67 <icebear67@sfclub.cc>
Date: Wed, 8 Jul 2026 23:38:23 +0800
Subject: [PATCH] fix: nftables intecepts all incoming traffics

---
 image/overlay/etc/nftables.d/10-services.nft | 2 ++
 1 file changed, 2 insertions(+)
 create mode 100644 image/overlay/etc/nftables.d/10-services.nft

diff --git a/image/overlay/etc/nftables.d/10-services.nft b/image/overlay/etc/nftables.d/10-services.nft
new file mode 100644
index 0000000..14fed98
--- /dev/null
+++ b/image/overlay/etc/nftables.d/10-services.nft
@@ -0,0 +1,2 @@
+add rule inet filter input tcp dport { 22, 2222 } accept comment "SSH"
+add rule inet filter input udp dport 41641 accept comment "Tailscale"
\ No newline at end of file