---
# Enable SNAT using iptables.

- name: Ensure SNAT is configured
  hosts: seed-hypervisor:seed
  tags:
    - snat
  vars:
    snat_rules:
      - interface: "{{ ansible_facts.default_ipv4.interface }}"
        source_ip: "{{ ansible_facts.default_ipv4.address }}"
  roles:
    - role: snat
      when: enable_snat | bool