move iptables-restore gateways

files/bridge-post-scripts/post-up.sh.j2

@@ -35,10 +35,6 @@ handle_gateway() {
 {% for gateway in br.gateways %}
 handle_gateway {{gateway.id}} {{gateway.address}}
 
-{% if gateway.id == 0 %}
-iptables-restore --noflush {{ansible_user_dir}}/iptables-gateways
-{% endif %}
-
 {% endfor %}
 {% endif %}
 

files/utility.sh.j2

@@ -19,7 +19,8 @@ initialize_ipset() {
 {% for subnet in localnets %}
     ip rule add pref 80 to {{subnet}} lookup main && \
 {% endfor %}
-    ip rule add pref 80 to 172.16.0.0/12 lookup main
+    ip rule add pref 80 to 172.16.0.0/12 lookup main && \
+    iptables-restore --noflush {{ansible_user_dir}}/iptables-gateways
   true
 }