- name: add iptables masquerading rule
  copy:
    src: setup-firewall
    dest: /usr/local/sbin/setup-firewall
    mode: 0755

- name: set up packet forwarding sysctl config
  copy:
    src: enable-routing.conf
    dest: /etc/sysctl.d

- name: load sysctl config change
  shell: sysctl -p /etc/sysctl.d/enable-routing.conf