---

- name: Déploiement des règles nftables
  hosts: firewall
  become: yes

  tasks:
    - name: Installation nftables 
      apt:
        name: nftables
        state: present

    - name: Copie de la configuration du module 'nftables.conf'    
      copy:
        src: ../../modules/nftables.conf   
        dest: /etc/nftables.conf   
        owner: root                 
        group: root           
        mode: '0644'               
      notify: Redémarrer nftables    
      
  handlers:
    - name: Redémarrer nftables
      service:
        name: nftables
        state: restarted