class firewall::rules::out::http ( Array[Stdlib::Port] $ports = [80], ) { $ports.each |$port| { nftables::rule { "default_out-http_tcp_${port}": content => "tcp dport ${port} accept", } } }