| Václav Kubernát | 22e240c | 2021-02-04 10:14:19 +0100 | [diff] [blame] | 1 | [Unit] |
| 2 | Description=Firewall management via sysrepo |
| Tomáš Pecka | 04eb737 | 2022-06-07 08:03:04 +0200 | [diff] [blame] | 3 | After=syslog.target network.target cfg-restore-sysrepo.service czechlight-migrate.service nacm-restore.service |
| Václav Kubernát | 22e240c | 2021-02-04 10:14:19 +0100 | [diff] [blame] | 4 | Before=rauc-mark-good.service |
| 5 | PartOf=netopeer2.service |
| Tomáš Pecka | 04eb737 | 2022-06-07 08:03:04 +0200 | [diff] [blame] | 6 | Requires=cfg-restore-sysrepo.service czechlight-migrate.service nacm-restore.service |
| Václav Kubernát | 22e240c | 2021-02-04 10:14:19 +0100 | [diff] [blame] | 7 | ConditionKernelCommandLine=czechlight |
| 8 | |
| 9 | [Service] |
| 10 | Type=simple |
| 11 | ExecStart=/usr/bin/veliad-firewall |
| Tomáš Pecka | d3861ce | 2022-05-11 11:51:30 +0200 | [diff] [blame] | 12 | Group=sysrepo |
| Václav Kubernát | 22e240c | 2021-02-04 10:14:19 +0100 | [diff] [blame] | 13 | PrivateTmp=yes |
| 14 | PrivateDevices=no |
| 15 | ProtectSystem=yes |
| 16 | ProtectHome=yes |
| 17 | Restart=always |
| 18 | RestartSec=10s |
| 19 | LogRateLimitIntervalSec=10 |
| 20 | LogRateLimitBurst=30000 |
| 21 | SyslogLevel=alert |
| 22 | |
| 23 | [Install] |
| 24 | WantedBy=multi-user.target |