It doesn't look like there is a way to add arbitrary firewall rules outside of ansible tasks to create files under /etc/nftables. We should add a variable that can be used to add arbitrary rules. By default the variable would be empty, and it would be reserved for user consumption. Firewall rules could be configured by just defining a value for the variable on the NodeSet.