--- # Never manage iptables, PVE provides its own daemon iptables_manage: False # We most likely want to enable ip_forwarding net_ipv4_forward: True