nft_to: - to: firebat proto: tcp port: [22, 8006] - to: nginx proto: tcp port: 443 xray_policy: - proxy: terraform