make rule directly here

manifests/rules/out/keyserver.pp

@@ -2,7 +2,16 @@
 class firewall::rules::out::keyserver {
   include firewall
   if $firewall::use_nftables {
-    include nftables::rules::out::keyserver
+    nftables::simplerule {
+      'keyserver_out':
+        chain => 'default_out',
+        dport => 11371,
+        proto => 'tcp';
+      'keyserver_s_out':
+        chain => 'default_out',
+        dport => 11372,
+        proto => 'tcp';
+    }
   } else {
     include shorewall::rules::out::keyserver
   }