ansible/roles/nftables/templates/nftables.conf.j2

table inet filter {
{% if nftables_builtin_defines is mapping %}
{%   for name, cfg in nftables_builtin_defines.items() %}
{%     if cfg is string %}
  define {{ name }} = {{ cfg }}
{%     elif cfg is sequence %} 
  define {{ name }} = {
{%     for elem in cfg %}
    {{ elem }},
{%     endfor %}
  }
{%     endif %}
{%   endfor %}
{% endif %}
{% if nftables_defines is mapping %}
{%   for name, cfg in nftables_defines.items() %}
  define {{ name }} = {
{%     for elem in cfg %}
    {{ elem }},
{%     endfor %}
  }
{%   endfor %}
{% endif %}

{% if nftables_builtin_sets is mapping %}
{%   for name, cfg in nftables_builtin_sets.items() %}
  set {{ name }} { 
{%     for elem in cfg %}
    {{ elem }}
{%     endfor %}
  }
{%   endfor %}
{% endif %}
{% if nftables_sets is mapping %}
{%   for name, cfg in nftables_sets.items() %}
  set {{ name }} { 
{%     for elem in cfg %}
    {{ elem }}
{%     endfor %}
  }
{%   endfor %}
{% endif %}

  chain input {
{% if nftables_input_builtin_rules is sequence %}
{%   for rule in nftables_input_builtin_rules %}
    {{ rule }}
{%   endfor %}
{% endif %}
{% if nftables_input_rules is sequence %}
{%   for rule in nftables_input_rules %}
    {{ rule }}
{%   endfor %}
{% endif %}
  }

  chain forward {
{% if nftables_forward_builtin_rules is sequence %}
{%   for rule in nftables_forward_builtin_rules %}
    {{ rule }}
{%   endfor %}
{% endif %}
{% if nftables_forward_rules is sequence %}
{%   for rule in nftables_forward_rules %}
    {{ rule }}
{%   endfor %}
{% endif %}
  }

  chain output {
{% if nftables_output_builtin_rules is sequence %}
{%   for rule in nftables_output_builtin_rules %}
    {{ rule }}
{%   endfor %}
{% endif %}
{% if nftables_output_rules is sequence %}
{%   for rule in nftables_output_rules %}
    {{ rule }}
{%   endfor %}
{% endif %}
  }
}