class firewall::rules::in::http ( Array[Stdlib::Port] $ports = [80], ) { $ports.each |$port| { nftables::rule { "default_in-http_${port}": content => "tcp dport ${port} accept", } } }