configpolicy/roles/dch-gw/templates/masquerade.nft.j2

table ip nat {
    chain postrouting {
        oif {{ ansible_default_ipv4.interface }} masquerade
    }
}