class net::nftables { $nftables_rules = lookup('sunet::nftables::allow::rules', Hash, 'deep', {}) $nftables_rules.each |$name, $params| { sunet::nftables::allow { $name: * => $params, } } }