class security::firewall {
  include firewall::nftables
}

class nftables {
  package { 'nftables':
    ensure => installed,
    name   => 'nftables',
  }
  ~> file { default: *=> $security::firewall::params::file_defaults;
    "/etc/nftables.conf":
      ensure => present,
      source => 'puppet:///modules/security/firewall/nftables/nftables.conf',
    ;
  }
}