diff --git a/defaults/main.yml b/defaults/main.yml
index 6fe4b5d..cd28674 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -15,3 +15,4 @@ firewall:
     input: drop
     output: accept
     forward: drop
+  vars: {}
diff --git a/templates/nftables.conf.j2 b/templates/nftables.conf.j2
index a35f961..0daebe7 100644
--- a/templates/nftables.conf.j2
+++ b/templates/nftables.conf.j2
@@ -19,6 +19,10 @@
 
 flush ruleset
 
+{% for i in firewall.vars %}
+define {{ i }} = { {{ firewall.vars[i]|join(', ') }} }
+{% endfor %}
+
 table inet filter {
 	chain input {
 		type filter hook input priority 0;