dont enable ufw on newer hosts

global/overlay/etc/puppet/manifests/cosmos-site.pp

@@ -35,7 +35,15 @@ class common {
   include sunet::tools
   include sunet::motd
   include sunet::ntp
-  include ufw
+
+  if $::sunet_nftables_opt_in != 'yes' and ! ( $::operatingsystem == 'Ubuntu' and versioncmp($::operatingsystemrelease, '22.04') >= 0 ) {
+    warning('Enabling UFW')
+    include ufw
+  } else {
+    warning('Enabling nftables')
+    ensure_resource ('class','sunet::nftables::init', { })
+  }
+
   include apt
   include apparmor
   package {'jq': ensure => 'latest'}