class firewall::rules::out::postgres (
  String $ipset = 'sql_galera',
){
  nftables::rule { 'default_out-postgres_tcp_5432':
    content => "tcp dport 5432 ip daddr @${ipset} accept",
  }
}