Allow DNS and DHCP from nspawnbr0.

tasks/main.yml

@@ -32,6 +32,18 @@
     direction: routed
     policy: allow
 
+- name: Allow DHCP, DNS in UFW
+  with_items:
+  - 53
+  - 67
+  - 68
+  ufw:
+    interface: nspawnbr0
+    policy: allow
+    proto: udp
+    rule: allow
+    to_port: '{{ item }}'
+
 - name: Configure systemd-networkd
   with_fileglob:
   - '*.netdev'