---
- name: Installer nftables
  ansible.builtin.apt:
    name: nftables
    state: present

- name: Déployer la configuration nftables Chezlepro
  ansible.builtin.template:
    src: nftables.conf.j2
    dest: /etc/nftables.conf
    owner: root
    group: root
    mode: "0644"
  notify: Reload nftables
  when: nftables_baseline_enabled | bool

- name: Activer nftables si demandé
  ansible.builtin.systemd:
    name: nftables
    enabled: true
    state: started
  when: nftables_baseline_enabled | bool

- name: Désactiver nftables si demandé
  ansible.builtin.systemd:
    name: nftables
    enabled: false
    state: stopped
  when: not (nftables_baseline_enabled | bool)
  failed_when: false