From 90a8a597eaa3a008eac946460b5c621eafa8ec62 Mon Sep 17 00:00:00 2001
From: Niklas Yann Wettengel <niyawe@niyawe.de>
Date: Sun, 2 Jul 2017 15:24:53 +0200
Subject: [PATCH] sysctl: load nf_conntrack module

---
 .../files/modules-load.d_nf_conntrack.conf             |  1 +
 roles/configure_sysctl/tasks/main.yml                  | 10 ++++++++++
 2 files changed, 11 insertions(+)
 create mode 100644 roles/configure_sysctl/files/modules-load.d_nf_conntrack.conf

diff --git a/roles/configure_sysctl/files/modules-load.d_nf_conntrack.conf b/roles/configure_sysctl/files/modules-load.d_nf_conntrack.conf
new file mode 100644
index 0000000..f9cda6a
--- /dev/null
+++ b/roles/configure_sysctl/files/modules-load.d_nf_conntrack.conf
@@ -0,0 +1 @@
+nf_conntrack
diff --git a/roles/configure_sysctl/tasks/main.yml b/roles/configure_sysctl/tasks/main.yml
index 04e0bef..e13de67 100644
--- a/roles/configure_sysctl/tasks/main.yml
+++ b/roles/configure_sysctl/tasks/main.yml
@@ -1,4 +1,14 @@
 ---
+- name: load nf_conntrack kernel module at boot
+  copy:
+      src: modules-load.d_nf_conntrack.conf
+      dest: /etc/modules-load.d/nf_conntrack.conf
+
+- name: load nf_conntrack kernel module
+  modprobe:
+      name: nf_conntrack
+      state: present
+
 - name: touch sysctl.conf
   copy:
       content: ''