- name: Persist ipv4 rules
  become: yes
  copy:
    content: "{{ iptables_rules.stdout }}"
    dest: "/var/lib/iptables/rules-save"

- name: Persist ipv6 rules
  become: yes
  copy:
    content: "{{ ip6tables_rules.stdout }}"
    dest: "/var/lib/ip6tables/rules-save"

- name: Ensure iptables is started
  become: yes
  service:
    name: iptables-restore
    state: started
    enabled: yes

- name: Ensure ip6tables is started
  become: yes
  service:
    name: ip6tables-restore
    state: started
    enabled: yes