[Service]
# Test VM only (tests/check_vm.sh). Accepts SSH so the test tools can log in.
ExecStartPost=/usr/sbin/nft insert rule inet filter input tcp dport 22 accept