from bundlewrap.metadata import atomic

@metadata_reactor.provides(
    'firewall/port_rules/22',
)
def firewall(metadata):
    return {
        'firewall': {
            'port_rules': {
                '22': atomic(metadata.get('openssh/restrict-to', {'*'})),
            },
        },
    }