pf: Don't set empty defaults, check if var is defined

roles/pf/defaults/main.yml

@@ -1,6 +1,3 @@
 ---
-
 firewall_in:
   - {proto: tcp, port: 22}
-
-firewall_raw: []

roles/pf/templates/pf.conf.j2

@@ -8,9 +8,11 @@ pass out
 pass in quick proto icmp
 pass in quick proto icmp6
 
-{% for rule in firewall_raw %}
+{% if firewall_raw is defined %}
+{%   for rule in firewall_raw %}
 {{ rule }}
-{% endfor %}
+{%   endfor %}
+{% endif %}
 {% for rule in firewall_in %}
 {%   if rule.from is defined %}
 {%     for from in rule.from | ipaddr %}