From 374e1fff2490bc7adab72530789d7f755c2a53da Mon Sep 17 00:00:00 2001
From: Sebastien Bourdeauducq <sb@m-labs.hk>
Date: Thu, 28 Jan 2021 16:05:15 +0800
Subject: [PATCH] rpi: allow client-specified SSH bind

---
 nixops/rpi.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixops/rpi.nix b/nixops/rpi.nix
index 8cd4782c..2ff0bf9e 100644
--- a/nixops/rpi.nix
+++ b/nixops/rpi.nix
@@ -36,6 +36,7 @@ in
 
   services.openssh.enable = true;
   services.openssh.passwordAuthentication = false;
+  services.openssh.gatewayPorts = "clientspecified";
   services.openssh.extraConfig =
     ''
     StreamLocalBindUnlink yes