add iptables_custom_rules_extra var

defaults/main.yml

@@ -15,6 +15,7 @@ iptables_default_tail: |
   -A FORWARD -j REJECT
 
 iptables_custom_rules: []
+iptables_custom_rules_extra: []
 
 # @var iptables_keep_unmanaged:description: >
 # By default this role deletes all iptables rules which are not managed by Ansible.

tasks/config.yml

@@ -8,7 +8,7 @@
         state: '{{ item.state }}'
         weight: '{{ item.weight | default(omit) }}'
         table: '{{ item.table | default(omit) }}'
-      loop: '{{ iptables_custom_rules }}'
+      loop: '{{ iptables_custom_rules + iptables_custom_rules_extra }}'
       loop_control:
         label: "{{ item.name }}"