Add nftables config to home-gw ignition

ignition/home-gw.bu

@@ -7,6 +7,26 @@ storage:
         inline: |
           net.ipv4.ip_forward = 1
           net.ipv6.conf.all.forwarding = 1
+    - path: /etc/sysconfig/nftables.conf
+      overwrite: true
+      contents:
+        inline: |
+          flush ruleset
+          table inet nat {
+            chain prerouting {
+              type nat hook prerouting priority 0
+              tcp dport 80 dnat ip to 10.0.0.2
+              tcp dport 80 dnat ip6 to [fd00::2]
+              tcp dport 443 dnat ip to 10.0.0.2
+              tcp dport 443 dnat ip6 to [fd00::2]
+              tcp dport 18089 dnat ip to 10.0.0.2
+              tcp dport 18089 dnat ip6 to [fd00::2]
+            }
+            chain postrouting {
+              type nat hook postrouting priority 0
+              oifname gateway masquerade
+            }
+          }
 passwd:
   users:
     - name: root