---
- name: Enable IP forwarding on host
  ansible.posix.sysctl:
    name: net.ipv4.ip_forward
    value: '1'
    sysctl_set: true
    state: present

- name: Enable source valid mark on host
  ansible.posix.sysctl:
    name: net.ipv4.conf.all.src_valid_mark
    value: '1'
    sysctl_set: true
    state: present
    reload: true

- name: Raise vm.max_map_count for Wazuh indexer
  ansible.posix.sysctl:
    name: vm.max_map_count
    value: '262144'
    sysctl_set: true
    state: present
    reload: true