diff options
| author | Emil Renner Berthing <esmil@labitat.dk> | 2018-09-26 13:16:11 +0200 |
|---|---|---|
| committer | Emil Renner Berthing <esmil@labitat.dk> | 2018-11-10 22:30:23 +0100 |
| commit | 9454fdbff511e965e4fd9eb187b7fe432dcd437e (patch) | |
| tree | 616a430b46a4796dfbcbc53662a1f70af59720b5 /roles/space_server/files/nftables.service | |
| parent | f203f1ccf538955dbd81e9a81b4cb9da520a9afa (diff) | |
| download | labitat-ansible-9454fdbff511e965e4fd9eb187b7fe432dcd437e.tar.gz labitat-ansible-9454fdbff511e965e4fd9eb187b7fe432dcd437e.tar.xz labitat-ansible-9454fdbff511e965e4fd9eb187b7fe432dcd437e.zip | |
space_server: drop uneccessary subdirs
Diffstat (limited to 'roles/space_server/files/nftables.service')
| -rw-r--r-- | roles/space_server/files/nftables.service | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/roles/space_server/files/nftables.service b/roles/space_server/files/nftables.service new file mode 100644 index 0000000..f1c9028 --- /dev/null +++ b/roles/space_server/files/nftables.service @@ -0,0 +1,30 @@ +[Unit] +Description=Netfilter Tables +Documentation=man:nft(8) +Requires=sys-devices-virtual-net-lan10.device +Requires=sys-devices-virtual-net-lan11.device +Requires=sys-devices-virtual-net-lan12.device +Requires=sys-devices-virtual-net-lan13.device +Requires=sys-devices-virtual-net-lan14.device +Requires=sys-devices-virtual-net-lan15.device +Requires=sys-devices-virtual-net-lan20.device +After=sys-devices-virtual-net-lan10.device +After=sys-devices-virtual-net-lan11.device +After=sys-devices-virtual-net-lan12.device +After=sys-devices-virtual-net-lan13.device +After=sys-devices-virtual-net-lan14.device +After=sys-devices-virtual-net-lan15.device +After=sys-devices-virtual-net-lan20.device +Before=network-online.target + +[Service] +Type=oneshot +ProtectSystem=full +ProtectHome=true +ExecStart=/sbin/nft -f /etc/sysconfig/nftables.conf +ExecReload=/sbin/nft 'flush ruleset; include "/etc/sysconfig/nftables.conf";' +ExecStop=/sbin/nft flush ruleset +RemainAfterExit=yes + +[Install] +WantedBy=multi-user.target |