Fix errors with nat and ssh

ansible/router/tasks/main.yaml

@@ -27,6 +27,7 @@
     name: sshd
     state: restarted
     enabled: yes
+    daemon_reload: yes
 
 - name: Setup firewall
   include_tasks: firewall.yaml

ansible/router/templates/etc/nftables.conf.j2

@@ -29,10 +29,12 @@ table inet filter {
     type filter hook forward priority 0;
 
     oif $wan accept
-    iif $wan drop
 
     ct status dnat accept
     iif $wan ct state related, established accept
+
+    # Drop everything else
+    iif $wan drop
   }
 
   # Allow all packets sent by the firewall