---
- name: Enable forwarding
  template:
    src: 10-forward.conf.j2
    dest: /etc/sysctl.d/10-forward.conf
    owner: root
    group: root
    mode: u=rw,g=r,o=r
  notify:
    - Reload sysctl
...