---
- name: Gate
  ansible.builtin.meta: end_host
  when: not firewall_nftables_enabled | bool

- name: Installer nftables
  ansible.builtin.apt:
    name: nftables
    state: present
    update_cache: true

- name: Déployer nftables
  ansible.builtin.template:
    src: nftables.conf.j2
    dest: /etc/nftables.conf
    mode: '0644'
  notify: Reload nftables

- name: Activer nftables
  ansible.builtin.systemd:
    name: nftables
    enabled: true
    state: started