class matrix::lb ( ) { $ips = lookup('sourceips', undef, undef, undef) $ips.each | String $ip | { if $::facts['sunet_nftables_enabled'] == 'yes' { sunet::nftables::allow { "nft_testip${ip}": port => 8443, from => $ip, } } notify { 'test': message => "Test test test ${ip}", } } }