ansible/roles/nftables_infra/templates/nftables.d/50-output.conf.j2

{{ ansible_managed | comment }}

table inet output {

	chain conntrack {
		ct state vmap {
			established: counter accept,
			related: counter accept,
			invalid: counter drop,
		}
	}

	chain output {
		type filter hook output priority filter
		policy accept

		jump conntrack

		counter
	}

}