- name: ensure nftables is installed
  ansible.builtin.apt:
    name: nftables
    state: present
  become: true

- name: deploy nftables configuration
  ansible.builtin.copy:
    content: "{{ nftables__config }}"
    dest: "/etc/nftables.conf"
    mode: "0644"
    owner: root
    group: root
  become: true
  notify: Restart nftables service