Add a custom nftables firewall config.

nix/kubernetes/roles/firewall/default.nix

@@ -52,5 +52,10 @@
 
     # Check logs for blocked connections:
     # journalctl -k or dmesg
+
+    networking.nftables.tables."my-fw" = {
+      family = "inet";
+      content = (builtins.readFile ./files/my-fw.nft);
+    };
   };
 }