#!/usr/sbin/nft -f

flush ruleset;

table ip nat {
	chain prerouting {
		type nat hook prerouting priority 0;
        tcp dport { http, https, ssh } ip daddr 136.243.xx.xx/32 dnat 10.10.0.90
	}

	chain postrouting {
		type nat hook postrouting priority 100;
        ip saddr 10.10.0.0/24 ip daddr != 10.10.0.0/24 oifname "enp2s0" masquerade
	}
	
    chain output {
        type nat hook output priority 0;
        tcp dport { http, https, ssh } ip daddr 136.243.xx.xx/32 dnat 10.10.0.90
    }
}



table inet filter {
	chain input {
		type filter hook input priority 0;

	}
	chain forward {
		type filter hook forward priority 0;

	}
	chain output {
		type filter hook output priority 0;

	}
}