puppet nftables

# allow forwarding traffic on bridges

class nftables::bridges(

  Enum['present','absent']

    $ensure = 'present',

  Regexp

    $bridgenames = /br+/

) {

  if $ensure == 'present' {

    $interfaces = keys($facts['networking']['interfaces'])

    $bridges = $interfaces.filter |$items| { $items =~ $bridgenames }

    $bridges.each |String $bridge| {

      nftables::rule { "default_fwd-bridge_${bridge}_${bridge}":

        order   => '08',

        content => "iifname ${bridge} oifname ${bridge} accept",

      }

    }

  }

}