table ip nat {
    chain postrouting {
        oif {{ ansible_default_ipv4.interface }} masquerade
    }
}