diff --git a/defaults/main.yml b/defaults/main.yml
index bc0290f..bdb0d74 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -19,3 +19,4 @@ firewall:
     input: drop
     output: accept
     forward: drop
+  vars: {}
diff --git a/templates/nftables.conf.j2 b/templates/nftables.conf.j2
index 5f93349..b09491f 100644
--- a/templates/nftables.conf.j2
+++ b/templates/nftables.conf.j2
@@ -19,6 +19,10 @@
 
 flush ruleset
 
+{% for i in firewall.vars %}
+define {{ i }} = { {{ firewall.vars[i]|join(', ') }} }
+{% endfor %}
+
 table inet filter {
 	chain input {
 		type filter hook input priority 0;