---
- name: ensure /etc/nftables.d exists
  ansible.builtin.file:
    path: /etc/nftables.d
    state: directory
    mode: "0755"

- name: render xray-lists config
  ansible.builtin.template:
    src: xray-config.yaml.j2
    dest: /var/lib/xray-lists/config.yaml
    mode: "0640"
  register: xray_lists_config

- name: update xray-lists 
  ansible.builtin.systemd_service:
    name: xray-lists.service
    state: started
  when: xray_lists_config.changed

- name: bootstrap empty config files
  ansible.builtin.copy:
    dest: "/etc/nftables.d/{{ item }}"
    content: ""
    force: false
    mode: "0644"
  loop:
    - 90-sets.nft
    - 90-proxy-prerouting.nft
    - 90-proxy-output.nft

- name: render nft sets
  ansible.builtin.template:
    src: 90-sets.nft.j2
    dest: /etc/nftables.d/90-sets.nft
    mode: "0644"
  notify: reload nftables

- name: render proxy prerouting
  ansible.builtin.template:
    src: 90-proxy-prerouting.nft.j2
    dest: /etc/nftables.d/90-proxy-prerouting.nft
    mode: "0644"
  notify: reload nftables

- name: render proxy output
  ansible.builtin.template:
    src: 90-proxy-output.nft.j2
    dest: /etc/nftables.d/90-proxy-output.nft
    mode: "0644"
  notify: reload nftables