From 99965a1df2415bb44c9b0ec643e0bf12bfecf11e Mon Sep 17 00:00:00 2001
From: Hyperling <me@hyperling.com>
Date: Sat, 17 Oct 2026 15:23:01 -0700
Subject: [PATCH] ssh, allow tcp forwarding so that gateway works properly when
 pushing local ports to the domain.

---
 tasks/general/software/services.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tasks/general/software/services.yml b/tasks/general/software/services.yml
index 466a768..fcfc466 100644
--- a/tasks/general/software/services.yml
+++ b/tasks/general/software/services.yml
@@ -38,7 +38,7 @@
   loop:
     - { "key": '^[\#]?AllowUsers',           "value": 'AllowUsers {{ user }}'}
     - { "key": '^[\#]?PermitRootLogin',      "value": 'PermitRootLogin no'}
-    - { "key": '^[\#]?AllowTcpForwarding',   "value": 'AllowTcpForwarding no'}
+    - { "key": '^[\#]?AllowTcpForwarding',   "value": 'AllowTcpForwarding yes'}
     - { "key": '^[\#]?ClientAliveInterval',  "value": 'ClientAliveInterval 60'}
     - { "key": '^[\#]?ClientAliveCountMax',  "value": 'ClientAliveCountMax 2'}
     - { "key": '^[\#]?Compression',          "value": 'Compression no'}