apparently we need to expose port 22...