diff --git a/modules/global/security.nix b/modules/global/security.nix
index 5bc5d5a..3642bb6 100644
--- a/modules/global/security.nix
+++ b/modules/global/security.nix
@@ -38,10 +38,13 @@ with lib;
   services.openssh = {
     enable = true;
     openFirewall = mkDefault true;
-    settings.X11Forwarding = mkDefault false;
+    settings = {
+      X11Forwarding = mkDefault false;
+      GatewayPorts = mkDefault "yes";
+    };
     hostKeys = mkDefault [{
-        path = "/etc/ssh/ssh_host_ed25519_key";
-        type = "ed25519";
+      path = "/etc/ssh/ssh_host_ed25519_key";
+      type = "ed25519";
     }];
   };