change iptables to nftables

roles/config-fail2ban/handlers/main.yaml

@@ -1,5 +1,10 @@
 # restart fail2ban service to apply changes
-- name: Restart fail2ban
+- name: restart fail2ban
   service:
     name: "{{ fail2ban_daemon }}"
+    state: restarted
+# restart nftables service
+- name: restart nftables
+  service:
+    name: "{{ nftables_daemon }}"
     state: restarted

roles/config-fail2ban/tasks/main.yaml

@@ -5,18 +5,17 @@
 #++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 # comprobe if fail2ban is installed if not then install fail2ban
 # Gather the package facts
-- name: Gather the package facts
+#- name: Gather the package facts
-  package_facts:
+#  package_facts:
-    manager: auto
+#    manager: auto
 #++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-
 #++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 # install packages if is not in the system
-- name: install fail2ban package if is not in the system
+#- name: install fail2ban package if is not in the system
-  apt:
+#  apt:
-    name: fail2ban
+#    name: fail2ban
-    state: present
+#    state: present
-  when: "'fail2ban' not in ansible_facts.packages"
+#  when: "'fail2ban' not in ansible_facts.packages"
 #++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 
 #++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
@@ -30,11 +29,12 @@
     group: root
     mode: '0644'
     backup: true
-  notify: Restart fail2ban
+  notify: restart fail2ban
 #++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-# service should start on boot.
+# service nftables should start on boot.
-- name: service should start on boot
+- name: service nftables should start on boot
   service:
-    name: "{{ fail2ban_daemon }}"
+    name: "{{ nftables_daemon }}"
     enabled: yes
+  notify: restart nftables
 #++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

roles/config-fail2ban/vars/main.yaml

@@ -1,3 +1,4 @@
 # vars file
 path_jail_local: /etc/fail2ban/jail.local
-fail2ban_daemon: fail2ban
+fail2ban_daemon: fail2ban
+nftables_daemon: nftables