---
- name: Install nftables
  apt:
    name: nftables
    state: present
    update_cache: true
  register: apt_result
  retries: 3
  until: apt_result is succeeded

- name: Deploy the configuration files
  template:
    src: "{{ item }}"
    dest: "/etc/unbound/{{ item }}"
    owner: "unbound"
    group: "unbound"
    mode: 0600
  loop:
    - unbound.conf

- name: Enable and start nftables
  systemd:
    name: nftables
    enabled: true
    state: started