diff --git a/nixops/rpi.nix b/nixops/rpi.nix
index 8cd4782..2ff0bf9 100644
--- a/nixops/rpi.nix
+++ b/nixops/rpi.nix
@@ -36,6 +36,7 @@ in
 
   services.openssh.enable = true;
   services.openssh.passwordAuthentication = false;
+  services.openssh.gatewayPorts = "clientspecified";
   services.openssh.extraConfig =
     ''
     StreamLocalBindUnlink yes