---
- name: Set NAT MASQUERADE
ansible.builtin.iptables:
  chain: POSTROUTING
  table: nat
  source: "{{ internal_network }}"
  jump: MASQUERADE

- ansible.posix.sysctl:
    name: kernel.panic
    value: '1'
    sysctl_file: /etc/sysctl.conf

- ansible.posix.sysctl:
    name: net.ipv4.ip_forward
    value: '1'
    sysctl_set: true
    state: present
    reload: true

- ansible.posix.sysctl:
    name: net.ipv6.conf.all.forwarding
    value: '1'
    sysctl_set: true
    state: present
    reload: true