--- - name: Install rules become: true template: src: templates/rules.j2 dest: /etc/nftables.conf mode: 0644 - name: Enable nftables become: true systemd: enabled: true masked: false name: nftables.service state: restarted