#
# enable routing
#

- name: sysctl.conf
  copy:
    src: sysctl.conf
    dest: /etc/sysctl.conf
  notify: reload kernel parms

#
# SLAAC
#

- name: radvd.conf
  copy:
    src: "radvd.{{type}}.conf"
    dest: /etc/radvd.conf
  when: type == 'nat4400slaac' or type == 'nat4400dhcp6'

- name: restart and enable ra daemon
  systemd:
    name: radvd
    state: restarted
    enabled: true
  when: type == 'nat4400slaac' or type == 'nat4400dhcp6'

- name: shut down and disable ra daemon
  systemd:
    name: radvd
    state: stopped
    enabled: false
  when: type != 'nat4400slaac' and type != 'nat4400dhcp6'

#
# dhcpd v6
#

- name: install isc-dhcp-server
  apt:
    name: isc-dhcp-server
  when: type == 'nat4400dhcp6'

- name: default/isc-dhcp-server
  copy:
    src: default_isc-dhcp-server
    dest: /etc/default/isc-dhcp-server
  when: type == 'nat4400dhcp6'

- name: restart and enable dhcpd6
  systemd:
    name: isc-dhcp-server
    state: restarted
    enabled: true
  when: type == 'nat4400dhcp6'

- name: shut down and disable dhcpd6
  systemd:
    name: isc-dhcp-server
    state: stopped
    enabled: false
  when: type != 'nat4400dhcp6'

#
# nat, routing & filtering rules
#

- name: nftables.conf
  copy:
    src: "nftables.{{type}}.conf"
    dest: /etc/nftables.conf
  notify: load nftables

- name: nftables up and enabled
  systemd:
    name: nftables
    state: started
    enabled: true