xoxys.iptables/tasks/config.yml

---
- name: Setup iptables
  block:
    - name: Set custom iptables rules
      iptables_raw:
        name: 'iptables_custom_rules_{{ item.name }}'
        rules: '{{ item.rules }}'
        state: '{{ item.state }}'
        weight: '{{ item.weight|default(omit) }}'
        table: '{{ item.table|default(omit) }}'
      with_items: '{{ iptables_custom_rules }}'
      loop_control:
        label: "{{item.name}}"
      tags: iptables

    - name: Set default iptables head rules
      iptables_raw:
        name: iptables_default_head
        weight: 10
        keep_unmanaged: '{{ iptables_keep_unmanaged }}'
        state: present
        rules: '{{ iptables_default_head }}'
      tags: iptables

    - name: Set default iptables tail rules
      iptables_raw:
        name: iptables_default_tail
        weight: 99
        keep_unmanaged: '{{ iptables_keep_unmanaged }}'
        state: '{{ (iptables_default_tail != "" ) | ternary("present", "absent") }}'
        rules: '{{ iptables_default_tail }}'
      tags: iptables
  become: True
  become_user: root