Tails firewall merge

excerpt from the roadmap:

• Summary: Custom Puppet module built on top of a 3rd-party module.
• Interest-holders: TPA
• Action: Migrate
  • Migrate both codebases to puppetized nftables
• Complexity: High
• Constraints:
  • Blocked by the merge of Puppet Server.
• References:
  • puppet-tirewall
  • puppetlabs-firewall

requires TPA and Tails to migrate to nftables, see #40554