- name: nftables configuration
  template:
    dest: /etc/nftables.conf
    src: nftables.conf.j2
  notify: Reload nftables

- name: nftables service
  service:
    name: nftables
    state: started
    enabled: true