works enough for now

compiler/firewall.py

@@ -0,0 +1,9 @@
+def build_firewall_rules(services, cfg):
+	rules = []
+	for s in services:
+		if "nat" in s.exposure:
+			rules.append({
+				"service": s.name,
+				"allow_port": s.public_port,
+			})
+	return(rules)