puppet nftables

# manage out tor

class nftables::rules::out::tor {

  nftables::filter::chain::rule{

    'default_out-tor':

      content => 'tcp dport 9001 accept',

  }

}

# manage in tor

class nftables::rules::tor(

  Array[Integer,1]

    $ports = [9001],

) {

  nftables::filter::chain::rule{

    'default_in-tor':

      content => "tcp dport {${join($ports,', ')}} accept",

  }

}