---
- name: Ensure IPv4 forwarding works
  sysctl:
    name: net.ipv4.ip_forward
    value: '1'
    sysctl_set: yes

- name: Ensure IPv6 forwarding works
  sysctl:
    name: net.ipv6.conf.all.forwarding
    value: '1'
    sysctl_set: yes

- name: Ensure routing from wireguard network
  community.general.ufw:
    interface_in: "{{ interface_name }}"
    rule: allow
    log: true
    route: true