This mostly copies the Debian 11 nftables setup and includes a play to clean up the old firewalld settings, timers, etc.
