firewall:
  defaults:
    all:
      statement: accept
      matches: ~
    input: {}
    forward: {}
    output: {}
    nat_prerouting: {}
    nat_postrouting: {}
  chains:
    input:
      allow_ssh: tcp dport ssh
    output: {}
    forward: {}
    nat_prerouting: {}
    nat_postrouting: {}
  policies:
    input: drop
    output: accept
    forward: drop
  routing: False
  vars: {}