| [Unit] |
| Description=Firewall management via sysrepo |
| After=syslog.target network.target czechlight-install-yang.service cfg-restore-sysrepo.service nacm-restore.service |
| Before=rauc-mark-good.service |
| PartOf=netopeer2.service |
| Requires=czechlight-install-yang.service cfg-restore-sysrepo.service nacm-restore.service |
| ConditionKernelCommandLine=czechlight |
| |
| [Service] |
| Type=simple |
| ExecStart=/usr/bin/veliad-firewall |
| PrivateTmp=yes |
| PrivateDevices=no |
| ProtectSystem=yes |
| ProtectHome=yes |
| Restart=always |
| RestartSec=10s |
| LogRateLimitIntervalSec=10 |
| LogRateLimitBurst=30000 |
| SyslogLevel=alert |
| |
| [Install] |
| WantedBy=multi-user.target |