---
- name: install the nftables ruleset
  become: true
  ansible.builtin.template:
    src: nftables.conf.j2
    dest: /etc/nftables.conf
    owner: root
    group: root
    mode: "0755"
    validate: /usr/sbin/nft -c -f %s
  notify: reload nftables
  tags: [labelprint, firewall]

- name: enable nftables
  become: true
  ansible.builtin.systemd:
    name: nftables.service
    enabled: true
    state: started
  tags: [labelprint, firewall]