add simple handling for nftable rulesets in base role

1 files changed, 11 insertions, 0 deletions

diff --git a/roles/network/nftables/base/defaults/main.yml b/roles/network/nftables/base/defaults/main.yml
new file mode 100644
index 00000000..95ec9073
--- /dev/null
+++ b/roles/network/nftables/base/defaults/main.yml
@@ -0,0 +1,11 @@
+---
+nftables_base_rules: {}
+
+# nftables_base_rules:
+#   example: |
+#     table inet global {
+#       chain input {
+#         type filter hook input priority filter; policy drop;
+#         ct state vmap { established: accept, related: accept, invalid: drop }
+#       }
+#     }