Load nf_conntrack before applying sysctl.conf

roles/gateway-nat/tasks/conntrack.yml

@@ -0,0 +1,4 @@
+---
+- name: Enable nf_conntrack module on boot
+  lineinfile: dest=/etc/modules line=nf_conntrack
+

roles/gateway-nat/tasks/main.yml

@@ -1,4 +1,5 @@
 ---
 
+- include: conntrack.yml
 - include: address.yml
 - include: bird.yml