#!/usr/sbin/nft -f
# Only your Omarchy machine may reach the robot's audio (4713) and MCP (8765) ports.
# Everything else, SSH included, is left alone. __HOST_IP__ is filled in by install.sh.

table inet robot
delete table inet robot

table inet robot {
    chain input {
        type filter hook input priority 0; policy accept;
        iif "lo" accept
        ip  saddr __HOST_IP__ tcp dport { 4713, 8765 } accept
        tcp dport { 4713, 8765 } drop
    }
}