nft_to: - to: [zone:eth0.12] proto: tcp port: 22 - to: firebat proto: tcp port: [22, 8006] - to: nginx proto: tcp port: 443 xray_policy: - proxy: terraform