---
- name: Setup NAT
  ansible.builtin.iptables:
    chain: POSTROUTING
    table: nat
    source: "{{ internal_network }}"
    jump: MASQUERADE

- ansible.posix.sysctl:
    name: kernel.panic
    value: '1'
    sysctl_file: /etc/sysctl.conf

- ansible.posix.sysctl:
    name: net.ipv4.ip_forward
    value: '1'
    sysctl_set: true
    state: present
    reload: true

- ansible.posix.sysctl:
    name: net.ipv6.conf.all.forwarding
    value: '1'
    sysctl_set: true
    state: present
    reload: true