- name: install iptables-persistent
  apt:
    name: iptables-persistent

- name: rules.v4
  template:
    src: rules-v4.j2
    dest: /etc/iptables/rules.v4
  register: rules_v4

- name: rules.v6
  template:
    src: rules-v6.j2
    dest: /etc/iptables/rules.v6
  register: rules_v6

- name: Reload netfilter-persistent
  command: /usr/sbin/netfilter-persistent reload
  when: iptables_reload_on_update and ( rules_v4 is changed or rules_v6 is changed )