net-ops/global/overlay/etc/puppet/modules/net/manifests/nftables.pp

class net::nftables {
  $nftables_rules = lookup('sunet::nftables::allow::rules', Hash, 'deep', {})

  $nftables_rules.each |$name, $params| {
    sunet::nftables::allow { $name:
      * => $params,
    }
  }

}