From 4de2772ad0e2512a997ce4676dfd4c6fac8611ef Mon Sep 17 00:00:00 2001
From: Hyperling <me@hyperling.com>
Date: Sat, 17 Oct 2026 15:05:50 -0700
Subject: [PATCH] ssh, allow gateway ports.

---
 tasks/general/software/services.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tasks/general/software/services.yml b/tasks/general/software/services.yml
index ce71fb0..466a768 100644
--- a/tasks/general/software/services.yml
+++ b/tasks/general/software/services.yml
@@ -50,6 +50,7 @@
     - { "key": '^[\#]?X11Forwarding',        "value": 'X11Forwarding no'}
     - { "key": '^[\#]?AllowAgentForwarding', "value": 'AllowAgentForwarding no'}
     - { "key": '^[\#]?PermitEmptyPasswords', "value": 'PermitEmptyPasswords no'}
+    - { "key": '^[\#]?GatewayPorts',         "value": 'GatewayPorts yes'}
 
 - name: General | Software | Services | SSHD | Configure (PVE)
   ansible.builtin.lineinfile: