nftables.conf

#!/usr/sbin/nft -f

flush ruleset

table inet filter {
	chain input {
		type filter hook input priority 0; policy drop;
		ct state { established, related } accept
		ct state { invalid } drop
		iif "lo" accept
		tcp dport 8022 accept
	}
	chain forward {
		type filter hook forward priority 0; policy drop;
		ct state { established, related } accept
		ct state { invalid } drop
	}
	chain output {
		type filter hook output priority 0; policy drop;
		ct state { new, established, related } accept
		ct state { invalid } drop
	}
}