diff --git a/services/gitea.nix b/services/gitea.nix
index a84e505..e24bcc6 100644
--- a/services/gitea.nix
+++ b/services/gitea.nix
@@ -104,6 +104,14 @@
         startAt = "*-*-* 23:45:00";
         location = "/persist/backups/postgres";
       };
+      services.openssh = {
+        enable = true;
+        passwordAuthentication = false;
+        listenAddresses = [ {
+          addr = "192.168.100.10";
+          port = 22;
+        } ];
+      };
     })).config.system.build.toplevel;
   };
 
@@ -114,4 +122,9 @@
       proxyPass = "http://${config.containers.gitea.localAddress}:3000";
     };
   };
+  hexchen.nftables.nat.forwardPorts = [{
+    ports = [ 22 ];
+    destination = "${config.containers.gitea.localAddress}:22";
+    proto = "tcp";
+  }];
 }
diff --git a/services/gitlab.nix b/services/gitlab.nix
index 5de66be..8a2c708 100644
--- a/services/gitlab.nix
+++ b/services/gitlab.nix
@@ -133,11 +133,11 @@
     })).config.system.build.toplevel;
   };
 
-  hexchen.nftables.nat.forwardPorts = [{
-    ports = [ 22 ];
-    destination = "${config.containers.gitlab.localAddress}:22";
-    proto = "tcp";
-  }];
+  # hexchen.nftables.nat.forwardPorts = [{
+  #   ports = [ 22 ];
+  #   destination = "${config.containers.gitlab.localAddress}:22";
+  #   proto = "tcp";
+  # }];
 
   services.nginx.virtualHosts."gitlab.infra4future.de" = {
     locations."/".proxyPass = "http://${config.containers.gitlab.localAddress}:80";