feat: add external dhcp option

defaults/main.yaml

@@ -12,3 +12,6 @@ incoming_firewall_rules: []
 
 # wireguard
 wireguard_enabled: true
+
+# dhcp
+dhcp_enable: false

templates/nftables.nft.j2

@@ -16,6 +16,11 @@ table inet filter {
         ip protocol icmp accept
         ip6 nexthdr ipv6-icmp accept
 
+{% if dhcp_enable %}
+        # allow dhcp
+        iif {{ lan_interface }} udp dport 67 accept
+{% endif %}
+
         # allow incoming firewall rules
 {% for rule in incoming_firewall_rules %}
         # {{ rule.name }}