---
- name: Install nftables
  ansible.builtin.apt:
    name: nftables
    state: latest
    update_cache: true

- name: Install ulogd (for nftables logging)
  ansible.builtin.apt:
    name: ulogd2
    state: latest
    update_cache: true

- name: Enable nftables service
  ansible.builtin.service:
    name: nftables
    enabled: true

- name: Start nftables service
  ansible.builtin.service:
    name: nftables
    state: started